}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x7, 0x4) (async) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x7, 0x40, 0x5, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@remote, @remote, @remote, @rose, @netrom, @null, @bcast, @bcast]}, &(0x7f0000000200)=0x48) getsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 1402.393218] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1402.496425] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:42:44 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 21:42:44 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socketpair(0x2c, 0xa, 0x6, &(0x7f00000000c0)) r2 = accept$ax25(r0, 0x0, &(0x7f0000000240)) getsockname$ax25(r2, &(0x7f0000000100)={{}, [@rose, @remote, @remote, @bcast, @rose, @bcast, @default, @null]}, &(0x7f0000000180)=0x48) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000040)=0x6d5d, 0x4) 21:42:44 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x0, 0x7f, 0x3, 0x920}) 21:42:44 executing program 5: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="2000284e13b7105d0f0e5cf14bbd70000ddcdf254b55d635ca00d37f041f"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0xc0) socketpair(0xf, 0x3, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 32) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x7, 0x40, 0x5, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async, rerun: 32) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@remote, @remote, @remote, @rose, @netrom, @null, @bcast, @bcast]}, &(0x7f0000000200)=0x48) getsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) 21:42:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x2000000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x165], [], [0x1], [0x0, 0x0, 0x1]}) socketpair(0x3, 0x6, 0x10000, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x2000000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x165], [], [0x1], [0x0, 0x0, 0x1]}) (async) socketpair(0x3, 0x6, 0x10000, &(0x7f0000000000)) (async) 21:42:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1002, 0x48e001) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1002, 0x48e001) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1002, 0x48e001) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:42:44 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$IMCTRLREQ(r0, 0x80044945, 0x0) 21:42:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x3], [], [], [0x0, 0x0, 0x0, 0xfc3]}) 21:42:44 executing program 5: socketpair(0xa, 0x5, 0x15, 0x0) 21:42:44 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 32) socketpair(0x2c, 0xa, 0x6, &(0x7f00000000c0)) (rerun: 32) r2 = accept$ax25(r0, 0x0, &(0x7f0000000240)) getsockname$ax25(r2, &(0x7f0000000100)={{}, [@rose, @remote, @remote, @bcast, @rose, @bcast, @default, @null]}, &(0x7f0000000180)=0x48) (async, rerun: 32) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000040)=0x6d5d, 0x4) (rerun: 32) 21:42:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1002, 0x48e001) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) [ 1403.295679] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1403.424658] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:45 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40000022) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000000), 0x80, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/20, 0x14}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001100)=""/215, 0xd7}, 0x1) 21:42:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x3], [], [], [0x0, 0x0, 0x0, 0xfc3]}) 21:42:45 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = geteuid() ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r2}) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) getsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000040), 0xfffffffffffffe64) 21:42:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x6, 0x6}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:45 executing program 5: socketpair(0xa, 0x5, 0x15, 0x0) 21:42:45 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socketpair(0x2c, 0xa, 0x6, &(0x7f00000000c0)) r2 = accept$ax25(r0, 0x0, &(0x7f0000000240)) getsockname$ax25(r2, &(0x7f0000000100)={{}, [@rose, @remote, @remote, @bcast, @rose, @bcast, @default, @null]}, &(0x7f0000000180)=0x48) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000040)=0x6d5d, 0x4) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000080), 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) socketpair(0x2c, 0xa, 0x6, &(0x7f00000000c0)) (async) accept$ax25(r0, 0x0, &(0x7f0000000240)) (async) getsockname$ax25(r2, &(0x7f0000000100)={{}, [@rose, @remote, @remote, @bcast, @rose, @bcast, @default, @null]}, &(0x7f0000000180)=0x48) (async) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000040)=0x6d5d, 0x4) (async) 21:42:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x6, 0x6}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:45 executing program 0: setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000040), 0x4) 21:42:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x3], [], [], [0x0, 0x0, 0x0, 0xfc3]}) [ 1404.194296] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 1404.201020] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:45 executing program 1: socketpair(0x11, 0xa, 0xffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) 21:42:45 executing program 5: socketpair(0xa, 0x5, 0x15, 0x0) socketpair(0xa, 0x5, 0x15, 0x0) (async) 21:42:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x6, 0x6}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:45 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40000022) (async) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000000), 0x80, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/20, 0x14}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001100)=""/215, 0xd7}, 0x1) 21:42:45 executing program 0: setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000040), 0x4) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000040), 0x4) (async) 21:42:45 executing program 1: socketpair(0x11, 0xa, 0xffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) 21:42:45 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000240)={0x0, 0xd}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000002c0)) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="18008621", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a21b8e4d", @ANYRES16=r4, @ANYBLOB="20002cbd7000fbdbdf25570000000c009900344f00007c0000000600950003000000060095000104000006009500ff000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)) 21:42:45 executing program 3: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 21:42:45 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "47a2a28a72f364e7", "98873a12564d3da0abb51c00b74b388b61c98d3a8e1ea46c578cc7ad2bcf91c3", "9398b44e", "0cc998f3fdfd2fa4"}, 0x38) socketpair(0x0, 0x2, 0x7, 0x0) 21:42:46 executing program 0: setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000040), 0x4) 21:42:46 executing program 3: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) 21:42:46 executing program 1: socketpair(0x11, 0xa, 0xffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) 21:42:46 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000240)={0x0, 0xd}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000002c0)) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="18008621", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a21b8e4d", @ANYRES16=r4, @ANYBLOB="20002cbd7000fbdbdf25570000000c009900344f00007c0000000600950003000000060095000104000006009500ff000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000240)={0x0, 0xd}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x200) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000002c0)) (async) socket$netlink(0x10, 0x3, 0x15) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="18008621", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a21b8e4d", @ANYRES16=r4, @ANYBLOB="20002cbd7000fbdbdf25570000000c009900344f00007c0000000600950003000000060095000104000006009500ff000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)) (async) 21:42:46 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "47a2a28a72f364e7", "98873a12564d3da0abb51c00b74b388b61c98d3a8e1ea46c578cc7ad2bcf91c3", "9398b44e", "0cc998f3fdfd2fa4"}, 0x38) socketpair(0x0, 0x2, 0x7, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "47a2a28a72f364e7", "98873a12564d3da0abb51c00b74b388b61c98d3a8e1ea46c578cc7ad2bcf91c3", "9398b44e", "0cc998f3fdfd2fa4"}, 0x38) (async) socketpair(0x0, 0x2, 0x7, 0x0) (async) 21:42:46 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) socketpair(0x3, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, 0xa, 0x6, 0x5, [@default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) 21:42:46 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40000022) (async) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000000), 0x80, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/20, 0x14}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001100)=""/215, 0xd7}, 0x1) 21:42:46 executing program 1: socketpair(0x11, 0xa, 0xffffffff, 0x0) 21:42:46 executing program 3: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) 21:42:46 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000240)={0x0, 0xd}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000002c0)) (async) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="18008621", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a21b8e4d", @ANYRES16=r4, @ANYBLOB="20002cbd7000fbdbdf25570000000c009900344f00007c0000000600950003000000060095000104000006009500ff000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)) 21:42:46 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) socketpair(0x3, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, 0xa, 0x6, 0x5, [@default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) socketpair(0x3, 0x1, 0x7, &(0x7f0000000000)) (async) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, 0xa, 0x6, 0x5, [@default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) (async) 21:42:46 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "47a2a28a72f364e7", "98873a12564d3da0abb51c00b74b388b61c98d3a8e1ea46c578cc7ad2bcf91c3", "9398b44e", "0cc998f3fdfd2fa4"}, 0x38) socketpair(0x0, 0x2, 0x7, 0x0) 21:42:46 executing program 1: socketpair(0x0, 0xa, 0xffffffff, 0x0) 21:42:46 executing program 3: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd72d, 0x18}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:46 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) socketpair(0x3, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, 0xa, 0x6, 0x5, [@default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) 21:42:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0xd}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x5555, 0x3, 0x0, 0x1], [0x0, 0x0, 0x4], [0xffffffff7fffbfff, 0x5]}) 21:42:47 executing program 5: socketpair(0xf, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:42:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0xd}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x5555, 0x3, 0x0, 0x1], [0x0, 0x0, 0x4], [0xffffffff7fffbfff, 0x5]}) 21:42:47 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000040)=""/103, 0x28, 0x67}, 0x20) 21:42:47 executing program 3: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd72d, 0x18}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:47 executing program 1: socketpair(0x0, 0xa, 0xffffffff, 0x0) 21:42:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0xd}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x5555, 0x3, 0x0, 0x1], [0x0, 0x0, 0x4], [0xffffffff7fffbfff, 0x5]}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0xd}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x5555, 0x3, 0x0, 0x1], [0x0, 0x0, 0x4], [0xffffffff7fffbfff, 0x5]}) (async) 21:42:47 executing program 5: socketpair(0xf, 0x6, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:42:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000000)) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:47 executing program 1: socketpair(0x0, 0xa, 0xffffffff, 0x0) 21:42:47 executing program 3: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd72d, 0x18}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:47 executing program 5: socketpair(0xf, 0x6, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:42:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000f3f9c3e59f79737cf42750000080003ef", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x8000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/137}) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 21:42:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180), 0x2, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000300)={0x2, 0xf9, &(0x7f0000000200)=""/249}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, [], [], [0x2]}) 21:42:48 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000040)=""/103, 0x28, 0x67}, 0x20) 21:42:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180), 0x2, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000300)={0x2, 0xf9, &(0x7f0000000200)=""/249}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, [], [], [0x2]}) 21:42:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000f3f9c3e59f79737cf42750000080003ef", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x8000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/137}) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 21:42:48 executing program 5: socketpair(0xa, 0x2, 0x1, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB="0060e44567ab0000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8001}, @jmp={0x5, 0x1, 0x8, 0x6, 0x7, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x7f, 0xe7, &(0x7f0000000100)=""/231, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x1c000000, 0xdd03}, 0x10, 0xffffffffffffffff, r3}, 0x80) 21:42:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000000)) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:48 executing program 1: socketpair(0x11, 0x0, 0xffffffff, 0x0) 21:42:48 executing program 1: socketpair(0x11, 0x0, 0xffffffff, 0x0) 21:42:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000f3f9c3e59f79737cf42750000080003ef", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x8000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/137}) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 21:42:48 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r3, &(0x7f0000000140)={{0x3, @netrom}, [@rose, @rose, @default, @rose, @netrom, @rose, @netrom, @null]}, &(0x7f0000000240)=0x48) accept$ax25(r2, &(0x7f0000000280)={{0x3, @rose}, [@netrom, @remote, @null, @rose, @rose, @remote, @rose, @netrom]}, &(0x7f0000000300)=0x48) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r4, &(0x7f0000000080)={{0x3, @null}, [@null, @netrom, @rose, @bcast, @remote, @netrom]}, &(0x7f0000000340)=0x2f) 21:42:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180), 0x2, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000300)={0x2, 0xf9, &(0x7f0000000200)=""/249}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, [], [], [0x2]}) 21:42:48 executing program 1: socketpair(0x11, 0x0, 0xffffffff, 0x0) 21:42:48 executing program 5: socketpair(0xa, 0x2, 0x1, 0x0) (async) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB="0060e44567ab0000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8001}, @jmp={0x5, 0x1, 0x8, 0x6, 0x7, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x7f, 0xe7, &(0x7f0000000100)=""/231, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x1c000000, 0xdd03}, 0x10, 0xffffffffffffffff, r3}, 0x80) [ 1408.033171] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1408.056262] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1408.067499] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1408.081353] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:42:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x100, 0x300) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={0x2, 0x67, &(0x7f0000000040)=""/103}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000140)) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:49 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000040)=""/103, 0x28, 0x67}, 0x20) 21:42:49 executing program 5: socketpair(0xa, 0x2, 0x1, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB="0060e44567ab0000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8001}, @jmp={0x5, 0x1, 0x8, 0x6, 0x7, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x7f, 0xe7, &(0x7f0000000100)=""/231, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x1c000000, 0xdd03}, 0x10, 0xffffffffffffffff, r3}, 0x80) socketpair(0xa, 0x2, 0x1, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB="0060e44567ab0000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8001}, @jmp={0x5, 0x1, 0x8, 0x6, 0x7, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x7f, 0xe7, &(0x7f0000000100)=""/231, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x1c000000, 0xdd03}, 0x10, 0xffffffffffffffff, r3}, 0x80) (async) 21:42:49 executing program 1: socketpair(0x11, 0xa, 0x0, 0x0) 21:42:49 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r3, &(0x7f0000000140)={{0x3, @netrom}, [@rose, @rose, @default, @rose, @netrom, @rose, @netrom, @null]}, &(0x7f0000000240)=0x48) accept$ax25(r2, &(0x7f0000000280)={{0x3, @rose}, [@netrom, @remote, @null, @rose, @rose, @remote, @rose, @netrom]}, &(0x7f0000000300)=0x48) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r4, &(0x7f0000000080)={{0x3, @null}, [@null, @netrom, @rose, @bcast, @remote, @netrom]}, &(0x7f0000000340)=0x2f) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) (async) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) accept$ax25(r3, &(0x7f0000000140)={{0x3, @netrom}, [@rose, @rose, @default, @rose, @netrom, @rose, @netrom, @null]}, &(0x7f0000000240)=0x48) (async) accept$ax25(r2, &(0x7f0000000280)={{0x3, @rose}, [@netrom, @remote, @null, @rose, @rose, @remote, @rose, @netrom]}, &(0x7f0000000300)=0x48) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockname$ax25(r4, &(0x7f0000000080)={{0x3, @null}, [@null, @netrom, @rose, @bcast, @remote, @netrom]}, &(0x7f0000000340)=0x2f) (async) 21:42:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) 21:42:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) [ 1408.847688] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1408.866017] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1408.889718] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:42:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x100, 0x300) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={0x2, 0x67, &(0x7f0000000040)=""/103}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000140)) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:49 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x2a0, 0x0, 0x89ff, 0xa45c}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4083}, 0x4040) [ 1408.911819] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:42:49 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r3, &(0x7f0000000140)={{0x3, @netrom}, [@rose, @rose, @default, @rose, @netrom, @rose, @netrom, @null]}, &(0x7f0000000240)=0x48) (async) accept$ax25(r2, &(0x7f0000000280)={{0x3, @rose}, [@netrom, @remote, @null, @rose, @rose, @remote, @rose, @netrom]}, &(0x7f0000000300)=0x48) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockname$ax25(r4, &(0x7f0000000080)={{0x3, @null}, [@null, @netrom, @rose, @bcast, @remote, @netrom]}, &(0x7f0000000340)=0x2f) [ 1408.960775] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1409.052303] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1409.058798] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1409.073113] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1409.082857] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:50 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000821}, 0x40000) 21:42:50 executing program 2: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@null, @bcast}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80011002) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, [], [], [0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x5]}) 21:42:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x100, 0x300) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={0x2, 0x67, &(0x7f0000000040)=""/103}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000140)) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:50 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x2a0, 0x0, 0x89ff, 0xa45c}, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4083}, 0x4040) 21:42:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:42:50 executing program 0: ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000080)=""/230) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:50 executing program 2: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@null, @bcast}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80011002) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, [], [], [0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x5]}) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@null, @bcast}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80011002) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, [], [], [0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x5]}) (async) 21:42:50 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 21:42:50 executing program 0: ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000080)=""/230) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x600441) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="70010000", @ANYRES16=r2, @ANYBLOB="01002bbdfe00fcdbdf251d0000000c0006000100000001080000500124"], 0x170}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000085}, 0x4080) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x56}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="4195bf2455d7032583a19d90525d337e17ab13e6be292125a01e2b5075fb11a4cdbe6896d8d2f2214ecd0617e3a69b8a4e7c3940a059532f6aec2442e873403212eb6e9ef4a0068b34b507dabade7dc6fb9e7a1c33d75edd", 0x58}) 21:42:50 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x2a0, 0x0, 0x89ff, 0xa45c}, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4083}, 0x4040) 21:42:50 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 21:42:51 executing program 0: ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000080)=""/230) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000080)=""/230) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) 21:42:51 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf251b0000000400cc000400cc0008009a000000000008009a000200000008009a00010000006c0022801c000080080004000100008008000400fcffffff080004000000000014000080080006000200000008000600090000002c000080080006000800000008000400ff0300000800030001040000080006000200000008000500070000000c00008008000200ae0000001c0122802400008008000600090000000800020002000000080005000600000008000200800000003c000080080003000300000008000700fd830000080004000900000008000200ffff000008000200ad00000008000400ce61000008000200070000001c00008008000300c0ffffff080003000800000008000300800200002c00008008000200ff0f000008000500ffffffff08000700ffffffff080004000800000008000600010000001c0000800800010008000000080004009900000008000600200000001c00008008000400080000000800040008000000080002001f0d000024000080080005008100000008000100070000000800010001000000080003000000008014000080080007003e0c00000800070003000000"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000821}, 0x40000) 21:42:51 executing program 2: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@null, @bcast}) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80011002) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, [], [], [0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x5]}) 21:42:51 executing program 5: socketpair(0x2c, 0x3, 0x0, 0x0) 21:42:51 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 21:42:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x600441) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="70010000", @ANYRES16=r2, @ANYBLOB="01002bbdfe00fcdbdf251d0000000c0006000100000001080000500124"], 0x170}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000085}, 0x4080) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x56}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="4195bf2455d7032583a19d90525d337e17ab13e6be292125a01e2b5075fb11a4cdbe6896d8d2f2214ecd0617e3a69b8a4e7c3940a059532f6aec2442e873403212eb6e9ef4a0068b34b507dabade7dc6fb9e7a1c33d75edd", 0x58}) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x600441) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="70010000", @ANYRES16=r2, @ANYBLOB="01002bbdfe00fcdbdf251d0000000c0006000100000001080000500124"], 0x170}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000085}, 0x4080) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x56}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="4195bf2455d7032583a19d90525d337e17ab13e6be292125a01e2b5075fb11a4cdbe6896d8d2f2214ecd0617e3a69b8a4e7c3940a059532f6aec2442e873403212eb6e9ef4a0068b34b507dabade7dc6fb9e7a1c33d75edd", 0x58}) (async) 21:42:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, [], [0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x5df], [0x0, 0x0, 0xfffffffffffffffe]}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @default, 0xee01}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@null, @null, 0x7, [@default, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 21:42:51 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 21:42:51 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockname$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@remote, @netrom, @rose, @netrom, @default, @remote, @null]}, &(0x7f0000000000)=0x48) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:51 executing program 5: socketpair(0x2c, 0x3, 0x0, 0x0) 21:42:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x600441) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="70010000", @ANYRES16=r2, @ANYBLOB="01002bbdfe00fcdbdf251d0000000c0006000100000001080000500124"], 0x170}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000085}, 0x4080) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x56}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="4195bf2455d7032583a19d90525d337e17ab13e6be292125a01e2b5075fb11a4cdbe6896d8d2f2214ecd0617e3a69b8a4e7c3940a059532f6aec2442e873403212eb6e9ef4a0068b34b507dabade7dc6fb9e7a1c33d75edd", 0x58}) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x600441) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="70010000", @ANYRES16=r2, @ANYBLOB="01002bbdfe00fcdbdf251d0000000c0006000100000001080000500124"], 0x170}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000085}, 0x4080) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x56}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="4195bf2455d7032583a19d90525d337e17ab13e6be292125a01e2b5075fb11a4cdbe6896d8d2f2214ecd0617e3a69b8a4e7c3940a059532f6aec2442e873403212eb6e9ef4a0068b34b507dabade7dc6fb9e7a1c33d75edd", 0x58}) (async) 21:42:51 executing program 5: socketpair(0x2c, 0x3, 0x0, 0x0) socketpair(0x2c, 0x3, 0x0, 0x0) (async) 21:42:51 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) [ 1410.877049] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 21:42:52 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000821}, 0x40000) 21:42:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0x17, &(0x7f0000000080)="26b8cc80561c3d2a3eb1238b1466ffa7c4d7e93b0b94c8"}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0x0]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) 21:42:52 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockname$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@remote, @netrom, @rose, @netrom, @default, @remote, @null]}, &(0x7f0000000000)=0x48) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:52 executing program 5: socketpair(0xf, 0x1, 0x800, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, [], [0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x5df], [0x0, 0x0, 0xfffffffffffffffe]}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @default, 0xee01}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@null, @null, 0x7, [@default, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 21:42:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 21:42:52 executing program 5: socketpair(0xf, 0x1, 0x800, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0xf, 0x1, 0x800, 0x0) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) 21:42:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, [], [0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x5df], [0x0, 0x0, 0xfffffffffffffffe]}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @default, 0xee01}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@null, @null, 0x7, [@default, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, [], [0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x5df], [0x0, 0x0, 0xfffffffffffffffe]}) (async) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @default, 0xee01}) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@null, @null, 0x7, [@default, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) [ 1411.673639] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 21:42:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 21:42:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0x17, &(0x7f0000000080)="26b8cc80561c3d2a3eb1238b1466ffa7c4d7e93b0b94c8"}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0x0]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) 21:42:52 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockname$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@remote, @netrom, @rose, @netrom, @default, @remote, @null]}, &(0x7f0000000000)=0x48) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:52 executing program 5: socketpair(0xf, 0x1, 0x800, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0xf, 0x1, 0x800, 0x0) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) [ 1411.798304] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 1411.834886] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 21:42:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0x17, &(0x7f0000000080)="26b8cc80561c3d2a3eb1238b1466ffa7c4d7e93b0b94c8"}) (async, rerun: 64) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0x0]}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x0) (rerun: 64) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) 21:42:53 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @rose, @netrom, @remote, @null, @rose, @bcast, @rose]}, &(0x7f0000000140)=0x48, 0x80800) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000100)=0x4, 0x4) accept$ax25(r1, 0x0, &(0x7f00000000c0)) socketpair(0x26, 0x5, 0x80000001, 0x0) 21:42:53 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 21:42:53 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x80000000, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 21:42:53 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, r1, r2], &(0x7f0000000240)=[0x7fffffff, 0x9, 0x0, 0x408d, 0x80], 0x40, 0x6, 0x4}) 21:42:53 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:42:53 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 21:42:53 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, r1, r2], &(0x7f0000000240)=[0x7fffffff, 0x9, 0x0, 0x408d, 0x80], 0x40, 0x6, 0x4}) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, r1, r2], &(0x7f0000000240)=[0x7fffffff, 0x9, 0x0, 0x408d, 0x80], 0x40, 0x6, 0x4}) (async) 21:42:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="752ca49bcfc5998a22b5fbe50754854685c415ca44f954ace403997022e6a0f4c781e5a7c56af0de47b38564d6ad6124e0ef183029a67cbfcf36d7559da859d928075efa7d5d0d9bd67677ccd433c5bd4aaf5941c3cd916f0fc740fd39e9d9daa14a6befa2565d2f51e241fd21204522db4babb1a2cb631a2d7155839cd52733b76a56ccc91a75076f0741688b72fa57af8c0fe6898010376e4700d3a7512a883d6520eee9d9c454b57169fdc3f9367e74ef2a2b496d0921af24"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x80d0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0xff, 0x0, 0x10001}) 21:42:53 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x80000000, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x8) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 21:42:53 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @rose, @netrom, @remote, @null, @rose, @bcast, @rose]}, &(0x7f0000000140)=0x48, 0x80800) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000100)=0x4, 0x4) accept$ax25(r1, 0x0, &(0x7f00000000c0)) socketpair(0x26, 0x5, 0x80000001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @rose, @netrom, @remote, @null, @rose, @bcast, @rose]}, &(0x7f0000000140)=0x48, 0x80800) (async) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000100)=0x4, 0x4) (async) accept$ax25(r1, 0x0, &(0x7f00000000c0)) (async) socketpair(0x26, 0x5, 0x80000001, 0x0) (async) 21:42:53 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, r1, r2], &(0x7f0000000240)=[0x7fffffff, 0x9, 0x0, 0x408d, 0x80], 0x40, 0x6, 0x4}) 21:42:53 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 21:42:54 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) (rerun: 32) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:42:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="752ca49bcfc5998a22b5fbe50754854685c415ca44f954ace403997022e6a0f4c781e5a7c56af0de47b38564d6ad6124e0ef183029a67cbfcf36d7559da859d928075efa7d5d0d9bd67677ccd433c5bd4aaf5941c3cd916f0fc740fd39e9d9daa14a6befa2565d2f51e241fd21204522db4babb1a2cb631a2d7155839cd52733b76a56ccc91a75076f0741688b72fa57af8c0fe6898010376e4700d3a7512a883d6520eee9d9c454b57169fdc3f9367e74ef2a2b496d0921af24"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x80d0) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0xff, 0x0, 0x10001}) 21:42:54 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 21:42:54 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @rose, @netrom, @remote, @null, @rose, @bcast, @rose]}, &(0x7f0000000140)=0x48, 0x80800) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000100)=0x4, 0x4) (async) accept$ax25(r1, 0x0, &(0x7f00000000c0)) socketpair(0x26, 0x5, 0x80000001, 0x0) 21:42:54 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x80000000, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 21:42:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x9]}) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x1}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "3a6ab6faab14c68ea1e6305e1a1d20271d2474c6e93df0761efae8771a9a64e9"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x44}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x24}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 21:42:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x9]}) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x1}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "3a6ab6faab14c68ea1e6305e1a1d20271d2474c6e93df0761efae8771a9a64e9"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x44}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x24}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 21:42:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="752ca49bcfc5998a22b5fbe50754854685c415ca44f954ace403997022e6a0f4c781e5a7c56af0de47b38564d6ad6124e0ef183029a67cbfcf36d7559da859d928075efa7d5d0d9bd67677ccd433c5bd4aaf5941c3cd916f0fc740fd39e9d9daa14a6befa2565d2f51e241fd21204522db4babb1a2cb631a2d7155839cd52733b76a56ccc91a75076f0741688b72fa57af8c0fe6898010376e4700d3a7512a883d6520eee9d9c454b57169fdc3f9367e74ef2a2b496d0921af24"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x80d0) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0xff, 0x0, 0x10001}) 21:42:54 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 21:42:54 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x6b, 0x244800) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x2, 0xe, &(0x7f0000000080)=""/14}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r1, &(0x7f0000000200)={{0x3, @netrom}, [@default, @default, @netrom, @rose, @default, @netrom, @null, @rose]}, &(0x7f0000000040)=0x48, 0x100000) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000100), 0x4) 21:42:54 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept4$ax25(r0, &(0x7f0000000080)={{0x3, @default}, [@null, @default, @netrom, @remote, @null, @bcast, @default, @netrom]}, &(0x7f0000000100)=0x48, 0x80800) r2 = geteuid() ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000140)={0x3, @null, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @bcast, 0xee01}) socketpair(0xf, 0x3, 0x0, 0x0) 21:42:54 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:42:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x9]}) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x1}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "3a6ab6faab14c68ea1e6305e1a1d20271d2474c6e93df0761efae8771a9a64e9"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x44}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x24}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x9]}) (async) socket$netlink(0x10, 0x3, 0x15) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x1}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "3a6ab6faab14c68ea1e6305e1a1d20271d2474c6e93df0761efae8771a9a64e9"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x44}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x24}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) (async) 21:42:54 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 21:42:54 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x6b, 0x244800) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x2, 0xe, &(0x7f0000000080)=""/14}) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r1, &(0x7f0000000200)={{0x3, @netrom}, [@default, @default, @netrom, @rose, @default, @netrom, @null, @rose]}, &(0x7f0000000040)=0x48, 0x100000) (async) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000100), 0x4) 21:42:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000, 0x400000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0xff, 0x501000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) 21:42:54 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) r1 = accept4$ax25(r0, &(0x7f0000000080)={{0x3, @default}, [@null, @default, @netrom, @remote, @null, @bcast, @default, @netrom]}, &(0x7f0000000100)=0x48, 0x80800) r2 = geteuid() ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000140)={0x3, @null, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)) (async) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @bcast, 0xee01}) (async) socketpair(0xf, 0x3, 0x0, 0x0) [ 1413.733482] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:42:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) 21:42:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000, 0x400000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0xff, 0x501000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) syz_open_dev$dri(&(0x7f00000000c0), 0x20000, 0x400000) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) syz_open_dev$dri(&(0x7f0000000100), 0xff, 0x501000) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) 21:42:54 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept4$ax25(r0, &(0x7f0000000080)={{0x3, @default}, [@null, @default, @netrom, @remote, @null, @bcast, @default, @netrom]}, &(0x7f0000000100)=0x48, 0x80800) (async) r2 = geteuid() ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000140)={0x3, @null, r2}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @bcast, 0xee01}) socketpair(0xf, 0x3, 0x0, 0x0) [ 1413.844499] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:42:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x9]}) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x1}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "3a6ab6faab14c68ea1e6305e1a1d20271d2474c6e93df0761efae8771a9a64e9"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x44}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x24}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 21:42:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) 21:42:54 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x6b, 0x244800) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x2, 0xe, &(0x7f0000000080)=""/14}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r1, &(0x7f0000000200)={{0x3, @netrom}, [@default, @default, @netrom, @rose, @default, @netrom, @null, @rose]}, &(0x7f0000000040)=0x48, 0x100000) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000100), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x6b, 0x244800) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x2, 0xe, &(0x7f0000000080)=""/14}) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) accept4$ax25(r1, &(0x7f0000000200)={{0x3, @netrom}, [@default, @default, @netrom, @rose, @default, @netrom, @null, @rose]}, &(0x7f0000000040)=0x48, 0x100000) (async) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000100), 0x4) (async) [ 1414.001348] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:42:55 executing program 4: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0x6, 0x4, 0x0, 0x75}) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r2], &(0x7f00000000c0)=[0x8, 0x0, 0x6], 0x1, 0x2}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "3cb5c9a5f3b971ad", "5a6c9b302198437764dbd53df3460e3bfee7acd09074f0efaae956887fb66f7e", "efa7bdce", "19b440a09371c45a"}, 0x38) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:42:55 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) recvfrom$ax25(r1, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000, 0x400000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0xff, 0x501000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) 21:42:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="148000002c2be0c64562a8631f6de95b9cfa9adf91fe3f731789f3b0e8b2d7e1ce1caeed39b727b5e715382d0ffcf78ea5b1736537", @ANYRES16=0x0, @ANYBLOB="000000000000000000001d000000"], 0x14}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x80000000, 0x301c80) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000680)={&(0x7f0000000640)="edc306e469ebd98c5a34a1d560ded4552e969f44f8a30a68e00291e5c30ccc44", 0x20}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000380)="c24efa516c8ca89ffb6b10a65daf5b970aa023b33a1b8ba4736f606e464f273af4262712a76b8f9e22533b5a2f83f8d1703af671a3838955991c5b7e6944c4fc9e1bf6484fb1d25b4df008cd10e4bab15cbc0758ca639ae3b0d31b14b2ebf51e9e48601a1c679edac59bfd29a2e892b6a5af492ca3dfa3caadbf", 0x7a}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x88d7c0b95603cc0f}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f1c7335f96e867d39fe929cf94c2f8b6"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b30c56ebe4e1e092ac9cbbd4b7f8f7801750c10439f29f3a88833d51f774bf93"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000040}, 0x80) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x81}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000440}, 0x40) 21:42:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) (async) 21:42:55 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000000)=[0x8, 0x2af, 0x8, 0xffff], &(0x7f0000000080)=[0xfff7, 0x401, 0x3, 0x9, 0xe919, 0x8], &(0x7f00000000c0)=[0x7ff, 0x2, 0xe855, 0xf8dc]}) 21:42:55 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000000)=[0x8, 0x2af, 0x8, 0xffff], &(0x7f0000000080)=[0xfff7, 0x401, 0x3, 0x9, 0xe919, 0x8], &(0x7f00000000c0)=[0x7ff, 0x2, 0xe855, 0xf8dc]}) 21:42:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x202) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x13}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r2}) 21:42:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="148000002c2be0c64562a8631f6de95b9cfa9adf91fe3f731789f3b0e8b2d7e1ce1caeed39b727b5e715382d0ffcf78ea5b1736537", @ANYRES16=0x0, @ANYBLOB="000000000000000000001d000000"], 0x14}}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x80000000, 0x301c80) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000680)={&(0x7f0000000640)="edc306e469ebd98c5a34a1d560ded4552e969f44f8a30a68e00291e5c30ccc44", 0x20}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000380)="c24efa516c8ca89ffb6b10a65daf5b970aa023b33a1b8ba4736f606e464f273af4262712a76b8f9e22533b5a2f83f8d1703af671a3838955991c5b7e6944c4fc9e1bf6484fb1d25b4df008cd10e4bab15cbc0758ca639ae3b0d31b14b2ebf51e9e48601a1c679edac59bfd29a2e892b6a5af492ca3dfa3caadbf", 0x7a}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x88d7c0b95603cc0f}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f1c7335f96e867d39fe929cf94c2f8b6"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b30c56ebe4e1e092ac9cbbd4b7f8f7801750c10439f29f3a88833d51f774bf93"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000040}, 0x80) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x81}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000440}, 0x40) 21:42:55 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) recvfrom$ax25(r1, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 1414.733158] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de 21:42:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @remote, @bcast, @netrom, @bcast, @rose, @rose, @rose]}, &(0x7f0000000080)=0x48) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000200)={0x0, 0xc}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000280)={r5}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000240)={0xffffffff, 0xbdb, 0x2, 0xff}) r7 = geteuid() ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000002c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000180)={r6}) r8 = geteuid() ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000100)={0x3, @null, r8}) 21:42:55 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000000)=[0x8, 0x2af, 0x8, 0xffff], &(0x7f0000000080)=[0xfff7, 0x401, 0x3, 0x9, 0xe919, 0x8], &(0x7f00000000c0)=[0x7ff, 0x2, 0xe855, 0xf8dc]}) [ 1414.909628] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de 21:42:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="148000002c2be0c64562a8631f6de95b9cfa9adf91fe3f731789f3b0e8b2d7e1ce1caeed39b727b5e715382d0ffcf78ea5b1736537", @ANYRES16=0x0, @ANYBLOB="000000000000000000001d000000"], 0x14}}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x80000000, 0x301c80) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000680)={&(0x7f0000000640)="edc306e469ebd98c5a34a1d560ded4552e969f44f8a30a68e00291e5c30ccc44", 0x20}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000380)="c24efa516c8ca89ffb6b10a65daf5b970aa023b33a1b8ba4736f606e464f273af4262712a76b8f9e22533b5a2f83f8d1703af671a3838955991c5b7e6944c4fc9e1bf6484fb1d25b4df008cd10e4bab15cbc0758ca639ae3b0d31b14b2ebf51e9e48601a1c679edac59bfd29a2e892b6a5af492ca3dfa3caadbf", 0x7a}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x88d7c0b95603cc0f}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f1c7335f96e867d39fe929cf94c2f8b6"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b30c56ebe4e1e092ac9cbbd4b7f8f7801750c10439f29f3a88833d51f774bf93"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000040}, 0x80) (async) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x81}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000440}, 0x40) 21:42:56 executing program 4: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0x6, 0x4, 0x0, 0x75}) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r2], &(0x7f00000000c0)=[0x8, 0x0, 0x6], 0x1, 0x2}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "3cb5c9a5f3b971ad", "5a6c9b302198437764dbd53df3460e3bfee7acd09074f0efaae956887fb66f7e", "efa7bdce", "19b440a09371c45a"}, 0x38) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0x6, 0x4, 0x0, 0x75}) (async) socket$kcm(0x29, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r2], &(0x7f00000000c0)=[0x8, 0x0, 0x6], 0x1, 0x2}) (async) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "3cb5c9a5f3b971ad", "5a6c9b302198437764dbd53df3460e3bfee7acd09074f0efaae956887fb66f7e", "efa7bdce", "19b440a09371c45a"}, 0x38) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:42:56 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000000), 0x400) r2 = accept$ax25(r0, &(0x7f00000000c0)={{0x3, @default}, [@remote, @netrom, @default, @null, @default, @remote, @default]}, &(0x7f0000000140)=0x48) accept$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @bcast, @default, @rose, @bcast, @default, @rose]}, &(0x7f0000000200)=0x48) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffffffffffffffff}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x202) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x13}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r2}) 21:42:56 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) recvfrom$ax25(r1, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @remote, @bcast, @netrom, @bcast, @rose, @rose, @rose]}, &(0x7f0000000080)=0x48) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000200)={0x0, 0xc}) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000280)={r5}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000240)={0xffffffff, 0xbdb, 0x2, 0xff}) r7 = geteuid() ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000002c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000180)={r6}) (async) r8 = geteuid() ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000100)={0x3, @null, r8}) 21:42:56 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000000), 0x400) r2 = accept$ax25(r0, &(0x7f00000000c0)={{0x3, @default}, [@remote, @netrom, @default, @null, @default, @remote, @default]}, &(0x7f0000000140)=0x48) accept$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @bcast, @default, @rose, @bcast, @default, @rose]}, &(0x7f0000000200)=0x48) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffffffffffffffff}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) accept4$ax25(r0, 0x0, &(0x7f0000000000), 0x400) (async) accept$ax25(r0, &(0x7f00000000c0)={{0x3, @default}, [@remote, @netrom, @default, @null, @default, @remote, @default]}, &(0x7f0000000140)=0x48) (async) accept$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @bcast, @default, @rose, @bcast, @default, @rose]}, &(0x7f0000000200)=0x48) (async) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffffffffffffffff}) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) 21:42:56 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r1, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x202) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x13}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r2}) 21:42:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @remote, @bcast, @netrom, @bcast, @rose, @rose, @rose]}, &(0x7f0000000080)=0x48) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000200)={0x0, 0xc}) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000280)={r5}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000240)={0xffffffff, 0xbdb, 0x2, 0xff}) (async) r7 = geteuid() ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000002c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000180)={r6}) (async) r8 = geteuid() ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000100)={0x3, @null, r8}) [ 1415.653563] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de 21:42:56 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) 21:42:56 executing program 4: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0x6, 0x4, 0x0, 0x75}) (async) r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r2], &(0x7f00000000c0)=[0x8, 0x0, 0x6], 0x1, 0x2}) (async) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "3cb5c9a5f3b971ad", "5a6c9b302198437764dbd53df3460e3bfee7acd09074f0efaae956887fb66f7e", "efa7bdce", "19b440a09371c45a"}, 0x38) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:42:56 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = accept4$ax25(r0, 0x0, &(0x7f0000000000), 0x400) (async) r2 = accept$ax25(r0, &(0x7f00000000c0)={{0x3, @default}, [@remote, @netrom, @default, @null, @default, @remote, @default]}, &(0x7f0000000140)=0x48) accept$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @bcast, @default, @rose, @bcast, @default, @rose]}, &(0x7f0000000200)=0x48) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffffffffffffffff}) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:56 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:56 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) 21:42:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000040)=[r1], &(0x7f0000000100)=[0x1000, 0x0, 0x7], 0x1}) 21:42:56 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000400)=""/40, &(0x7f0000000440)=0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r3) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000200)=""/251, 0xfb}], 0x5, &(0x7f0000000380)=""/60, 0x3c}, 0x2062) 21:42:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000180)={0x1, &(0x7f0000000000)=""/154, &(0x7f0000000140)=[{0x8, 0x34, 0x401, &(0x7f0000000100)=""/52}]}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:56 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:56 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:56 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) 21:42:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000180)={0x1, &(0x7f0000000000)=""/154, &(0x7f0000000140)=[{0x8, 0x34, 0x401, &(0x7f0000000100)=""/52}]}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000180)={0x1, &(0x7f0000000000)=""/154, &(0x7f0000000140)=[{0x8, 0x34, 0x401, &(0x7f0000000100)=""/52}]}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:42:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000040)=[r1], &(0x7f0000000100)=[0x1000, 0x0, 0x7], 0x1}) 21:42:56 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:56 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:57 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@rose, @null, @rose, @bcast, @rose, @default, @null, @rose]}, &(0x7f00000000c0)=0x48) [ 1416.087882] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000040)=[r1], &(0x7f0000000100)=[0x1000, 0x0, 0x7], 0x1}) 21:42:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000180)={0x1, &(0x7f0000000000)=""/154, &(0x7f0000000140)=[{0x8, 0x34, 0x401, &(0x7f0000000100)=""/52}]}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000180)={0x1, &(0x7f0000000000)=""/154, &(0x7f0000000140)=[{0x8, 0x34, 0x401, &(0x7f0000000100)=""/52}]}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) [ 1416.131228] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:57 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) r1 = socket$kcm(0x29, 0x7, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000400)=""/40, &(0x7f0000000440)=0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r3) (async) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000200)=""/251, 0xfb}], 0x5, &(0x7f0000000380)=""/60, 0x3c}, 0x2062) 21:42:57 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:42:57 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@rose, @null, @rose, @bcast, @rose, @default, @null, @rose]}, &(0x7f00000000c0)=0x48) 21:42:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1c]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 21:42:57 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x7) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7, "e1bc2fb58a573bdc12e7bd196a0539816cb3b37771cdfcc4ac8b6b2560d91116", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) 21:42:57 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4) 21:42:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7, "e1bc2fb58a573bdc12e7bd196a0539816cb3b37771cdfcc4ac8b6b2560d91116", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) 21:42:57 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@rose, @null, @rose, @bcast, @rose, @default, @null, @rose]}, &(0x7f00000000c0)=0x48) [ 1416.896180] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1c]}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 21:42:57 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1c]}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 21:42:58 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) r1 = socket$kcm(0x29, 0x7, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000400)=""/40, &(0x7f0000000440)=0x28) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r3) (async) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000200)=""/251, 0xfb}], 0x5, &(0x7f0000000380)=""/60, 0x3c}, 0x2062) 21:42:58 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4) 21:42:58 executing program 5: getpeername$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@netrom, @remote, @null, @rose, @netrom, @netrom, @bcast]}, &(0x7f00000001c0)=0x48) socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x4048811) 21:42:58 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:58 executing program 2: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3f, 0x20e00) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000140)=[0x9], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7f, 0xeeeeeeee}) 21:42:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7, "e1bc2fb58a573bdc12e7bd196a0539816cb3b37771cdfcc4ac8b6b2560d91116", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) 21:42:58 executing program 2: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3f, 0x20e00) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000140)=[0x9], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7f, 0xeeeeeeee}) 21:42:58 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) socket$netlink(0x10, 0x3, 0x15) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4) (async) 21:42:58 executing program 5: getpeername$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@netrom, @remote, @null, @rose, @netrom, @netrom, @bcast]}, &(0x7f00000001c0)=0x48) socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x4048811) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@netrom, @remote, @null, @rose, @netrom, @netrom, @bcast]}, &(0x7f00000001c0)=0x48) (async) socketpair(0xf, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x4048811) (async) 21:42:58 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x41) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:58 executing program 2: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3f, 0x20e00) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000140)=[0x9], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7f, 0xeeeeeeee}) 21:42:59 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/19}, {&(0x7f0000000080)=""/217}, {&(0x7f0000000180)=""/10}, {&(0x7f00000001c0)=""/167}], 0x9}, 0x40000142) 21:42:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x41) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:59 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)=@mmap={0x6, 0x1, 0x4, 0x0, 0xb1, {0x77359400}, {0x1, 0x4, 0xd6, 0x9, 0x5, 0x5, "6c610899"}, 0x100, 0x1, {}, 0x100}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r2 = accept$ax25(r0, &(0x7f0000000100)={{0x3, @bcast}, [@default, @remote, @netrom, @null, @netrom, @rose, @default, @bcast]}, &(0x7f0000000180)=0x48) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000300)=0x10000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000000c0)) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) 21:42:59 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:59 executing program 5: getpeername$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@netrom, @remote, @null, @rose, @netrom, @netrom, @bcast]}, &(0x7f00000001c0)=0x48) socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x4048811) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@netrom, @remote, @null, @rose, @netrom, @netrom, @bcast]}, &(0x7f00000001c0)=0x48) (async) socketpair(0xf, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x4048811) (async) 21:42:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [0x20], [], [0x0, 0x4], [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) 21:42:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [0x20], [], [0x0, 0x4], [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) 21:42:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x41) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:42:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x9, 0x4) socketpair(0xf, 0x3, 0x0, 0x0) 21:42:59 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:59 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/19}, {&(0x7f0000000080)=""/217}, {&(0x7f0000000180)=""/10}, {&(0x7f00000001c0)=""/167}], 0x9}, 0x40000142) 21:42:59 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)=@mmap={0x6, 0x1, 0x4, 0x0, 0xb1, {0x77359400}, {0x1, 0x4, 0xd6, 0x9, 0x5, 0x5, "6c610899"}, 0x100, 0x1, {}, 0x100}) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) r2 = accept$ax25(r0, &(0x7f0000000100)={{0x3, @bcast}, [@default, @remote, @netrom, @null, @netrom, @rose, @default, @bcast]}, &(0x7f0000000180)=0x48) (async) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20}) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000300)=0x10000, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000000c0)) (async) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 1418.889004] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:42:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [0x20], [], [0x0, 0x4], [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x1}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [0x20], [], [0x0, 0x4], [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) (async) 21:42:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) 21:42:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x9, 0x4) (async) socketpair(0xf, 0x3, 0x0, 0x0) 21:42:59 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:42:59 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/19}, {&(0x7f0000000080)=""/217}, {&(0x7f0000000180)=""/10}, {&(0x7f00000001c0)=""/167}], 0x9}, 0x40000142) 21:42:59 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)=@mmap={0x6, 0x1, 0x4, 0x0, 0xb1, {0x77359400}, {0x1, 0x4, 0xd6, 0x9, 0x5, 0x5, "6c610899"}, 0x100, 0x1, {}, 0x100}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r2 = accept$ax25(r0, &(0x7f0000000100)={{0x3, @bcast}, [@default, @remote, @netrom, @null, @netrom, @rose, @default, @bcast]}, &(0x7f0000000180)=0x48) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000300)=0x10000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000000c0)) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_init_net_socket$ax25(0x3, 0x3, 0xca) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)=@mmap={0x6, 0x1, 0x4, 0x0, 0xb1, {0x77359400}, {0x1, 0x4, 0xd6, 0x9, 0x5, 0x5, "6c610899"}, 0x100, 0x1, {}, 0x100}) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) accept$ax25(r0, &(0x7f0000000100)={{0x3, @bcast}, [@default, @remote, @netrom, @null, @netrom, @rose, @default, @bcast]}, &(0x7f0000000180)=0x48) (async) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20}) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000300)=0x10000, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000000c0)) (async) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) 21:42:59 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:43:00 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000040)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/108, 0x6c}], 0x7, &(0x7f0000000480)=""/238, 0xee}, 0x22) [ 1419.068098] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1419.083469] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) 21:43:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x9, 0x4) socketpair(0xf, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x9, 0x4) (async) socketpair(0xf, 0x3, 0x0, 0x0) (async) 21:43:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000140)={0x2, 0x5, &(0x7f0000000100)=""/5}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000001c0)={0x9fa, 0x9334, 0x4, 0xfff, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000180)={0x0, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x0, 0xcb01, 0x7f, 0x70121958}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x20], [], [], [0x0, 0x1, 0x200]}) 21:43:00 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:43:00 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0xf, 0x3, 0x0, 0x0) 21:43:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) [ 1419.220713] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1419.290991] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:00 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockopt$ax25_int(r1, 0x101, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={[{'-'}, {'\x00'}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}], [{@fowner_gt}, {@measure}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000003c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) recvfrom$ax25(r1, &(0x7f0000000300)=""/49, 0x31, 0x40010102, &(0x7f0000000340)={{0x3, @default, 0x3}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = accept$ax25(r0, &(0x7f0000000140)={{0x3, @null}, [@null, @bcast, @null, @netrom, @default, @remote, @rose, @default]}, &(0x7f0000000240)=0x48) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@null, @bcast, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @null, 0x80, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 21:43:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000140)={0x2, 0x5, &(0x7f0000000100)=""/5}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000001c0)={0x9fa, 0x9334, 0x4, 0xfff, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000180)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x0, 0xcb01, 0x7f, 0x70121958}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x20], [], [], [0x0, 0x1, 0x200]}) (rerun: 32) 21:43:00 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:43:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ce43cc7bbb79b987e5633ab44f1ed261d72bad93ee6f73a20fc5e3b68940efe2671c7f31c6e587d5122be24a0bd66bd266423b4a82a03fdc21516619b7a1d24e74ec14e129ace18d4d0edafa27cee2bf34e8e9b2d78d1c9f2cb7e77dc8c8f7e44dfce8deba619b538cba6074e3920dc321521e24c860f98931c29157c75e1b0c3dd18db7e8f65f3fe3e7c235d2b6107c1391b127c7c10366b20b25ffb0e9581ee57b27b22a871bdee3df1fb7260563a7d3b2775d0179202140ad11097b219957f1746c2565ddcbd830168252f5af782c4126c764a01b5da99c2608362087d42828fcb3d3528a82bfc4", @ANYRES16=0x0, @ANYBLOB="080326bd7000fddbdf25160000000c00060000000000000000000c0006000300000003000000"], 0x2c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) 21:43:00 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0xf, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair(0xf, 0x3, 0x0, 0x0) (async) [ 1419.348184] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1419.463628] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1419.487074] ERROR: device name not specified. [ 1419.549546] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:00 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000040)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/108, 0x6c}], 0x7, &(0x7f0000000480)=""/238, 0xee}, 0x22) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000040)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/108, 0x6c}], 0x7, &(0x7f0000000480)=""/238, 0xee}, 0x22) (async) 21:43:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000140)={0x2, 0x5, &(0x7f0000000100)=""/5}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000001c0)={0x9fa, 0x9334, 0x4, 0xfff, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000180)={0x0, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x0, 0xcb01, 0x7f, 0x70121958}) (rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x20], [], [], [0x0, 0x1, 0x200]}) 21:43:00 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:43:00 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0xf, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair(0xf, 0x3, 0x0, 0x0) (async) 21:43:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ce43cc7bbb79b987e5633ab44f1ed261d72bad93ee6f73a20fc5e3b68940efe2671c7f31c6e587d5122be24a0bd66bd266423b4a82a03fdc21516619b7a1d24e74ec14e129ace18d4d0edafa27cee2bf34e8e9b2d78d1c9f2cb7e77dc8c8f7e44dfce8deba619b538cba6074e3920dc321521e24c860f98931c29157c75e1b0c3dd18db7e8f65f3fe3e7c235d2b6107c1391b127c7c10366b20b25ffb0e9581ee57b27b22a871bdee3df1fb7260563a7d3b2775d0179202140ad11097b219957f1746c2565ddcbd830168252f5af782c4126c764a01b5da99c2608362087d42828fcb3d3528a82bfc4", @ANYRES16=0x0, @ANYBLOB="080326bd7000fddbdf25160000000c00060000000000000000000c0006000300000003000000"], 0x2c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) 21:43:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={0x0}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)) 21:43:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ce43cc7bbb79b987e5633ab44f1ed261d72bad93ee6f73a20fc5e3b68940efe2671c7f31c6e587d5122be24a0bd66bd266423b4a82a03fdc21516619b7a1d24e74ec14e129ace18d4d0edafa27cee2bf34e8e9b2d78d1c9f2cb7e77dc8c8f7e44dfce8deba619b538cba6074e3920dc321521e24c860f98931c29157c75e1b0c3dd18db7e8f65f3fe3e7c235d2b6107c1391b127c7c10366b20b25ffb0e9581ee57b27b22a871bdee3df1fb7260563a7d3b2775d0179202140ad11097b219957f1746c2565ddcbd830168252f5af782c4126c764a01b5da99c2608362087d42828fcb3d3528a82bfc4", @ANYRES16=0x0, @ANYBLOB="080326bd7000fddbdf25160000000c00060000000000000000000c0006000300000003000000"], 0x2c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ce43cc7bbb79b987e5633ab44f1ed261d72bad93ee6f73a20fc5e3b68940efe2671c7f31c6e587d5122be24a0bd66bd266423b4a82a03fdc21516619b7a1d24e74ec14e129ace18d4d0edafa27cee2bf34e8e9b2d78d1c9f2cb7e77dc8c8f7e44dfce8deba619b538cba6074e3920dc321521e24c860f98931c29157c75e1b0c3dd18db7e8f65f3fe3e7c235d2b6107c1391b127c7c10366b20b25ffb0e9581ee57b27b22a871bdee3df1fb7260563a7d3b2775d0179202140ad11097b219957f1746c2565ddcbd830168252f5af782c4126c764a01b5da99c2608362087d42828fcb3d3528a82bfc4", @ANYRES16=0x0, @ANYBLOB="080326bd7000fddbdf25160000000c00060000000000000000000c0006000300000003000000"], 0x2c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) (async) 21:43:01 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockopt$ax25_int(r1, 0x101, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={[{'-'}, {'\x00'}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}], [{@fowner_gt}, {@measure}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000003c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) recvfrom$ax25(r1, &(0x7f0000000300)=""/49, 0x31, 0x40010102, &(0x7f0000000340)={{0x3, @default, 0x3}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = accept$ax25(r0, &(0x7f0000000140)={{0x3, @null}, [@null, @bcast, @null, @netrom, @default, @remote, @rose, @default]}, &(0x7f0000000240)=0x48) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@null, @bcast, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @null, 0x80, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockopt$ax25_int(r1, 0x101, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={[{'-'}, {'\x00'}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}], [{@fowner_gt}, {@measure}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) (async) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000003c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) (async) recvfrom$ax25(r1, &(0x7f0000000300)=""/49, 0x31, 0x40010102, &(0x7f0000000340)={{0x3, @default, 0x3}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) accept$ax25(r0, &(0x7f0000000140)={{0x3, @null}, [@null, @bcast, @null, @netrom, @default, @remote, @rose, @default]}, &(0x7f0000000240)=0x48) (async) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@null, @bcast, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @null, 0x80, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) 21:43:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x5, 0x1, 0x59fb, 0x200, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000000)="8eb2d057ca71ce18132c7cae3dbc1406736bda1ff7c48a71d511bccdd0abf1ccbb2dce3dfa5b4e0eb315c5e5f696af6d1bff574dcd00a0ecc68eeb46ead76d56b347b9e148d08e88cd950e37c313b50943a14ffb7de77478d83cca09ec33df7d73a2bd9516a7b7e4230d93219ace17da04f829e697f3a8f0210c1866671e33d332c0bef36c7f1ee57e077942e2f4c89b811b8f282bd95f607c6f47cf3eeaff3b8291b0fd46cc1ba9d0a7139af546a9a71edfdc8d7a81fcf04f45e7cde73c04431685a6", &(0x7f0000000100)=""/84, &(0x7f0000000180)="8d59759452fbaa1b1a6e28ce69ceefdb9ccff58d8871700f2bb56e4ddb7f44a8ef50a068ab314542a2293b7f3c1307bc5da8a718fa12e160940fef4a2d8e4043c1069bceb5645a4311faed28416bbfa3afc50f4029b9", &(0x7f0000000200)="d4e6a8672c0bea4c10d9d2492dbf9906acdf25b03a17adb14753e4112fe62fb9004400110c3107b966855a5992d30763d39ebe7cd41425d3a3406384f9e701b7ad84cfd1b8116745c1a8893ea5918c100ac622d423bab37df21b1210feeefb33b3b5bca5970a89b292a3f39559ef871504ba2fc7594f38591966ce2baf332bc25d003a7ac5e0199e8a35458928c1f80c8789fc4b1df5ba30311eeb7481ca391f7f7e613b70b3e719e10be5987b61207fb86ca785732f7be2d3fbb0cb4eeb", 0x3, r0}, 0x38) socketpair(0xf, 0x3, 0x0, 0x0) 21:43:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ce43cc7bbb79b987e5633ab44f1ed261d72bad93ee6f73a20fc5e3b68940efe2671c7f31c6e587d5122be24a0bd66bd266423b4a82a03fdc21516619b7a1d24e74ec14e129ace18d4d0edafa27cee2bf34e8e9b2d78d1c9f2cb7e77dc8c8f7e44dfce8deba619b538cba6074e3920dc321521e24c860f98931c29157c75e1b0c3dd18db7e8f65f3fe3e7c235d2b6107c1391b127c7c10366b20b25ffb0e9581ee57b27b22a871bdee3df1fb7260563a7d3b2775d0179202140ad11097b219957f1746c2565ddcbd830168252f5af782c4126c764a01b5da99c2608362087d42828fcb3d3528a82bfc4", @ANYRES16=0x0, @ANYBLOB="080326bd7000fddbdf25160000000c00060000000000000000000c0006000300000003000000"], 0x2c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) 21:43:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={0x0}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)) 21:43:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1000, 0x10000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) [ 1420.364060] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1420.386489] ERROR: device name not specified. [ 1420.442446] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1420.452203] ERROR: device name not specified. [ 1420.457945] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:01 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) (async, rerun: 32) r1 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000040)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/108, 0x6c}], 0x7, &(0x7f0000000480)=""/238, 0xee}, 0x22) 21:43:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x9, 0x4) socketpair(0xf, 0x3, 0x0, 0x0) 21:43:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={0x0}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={0x0}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)) (async) 21:43:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1000, 0x10000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1000, 0x10000) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:43:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x5, 0x1, 0x59fb, 0x200, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000000)="8eb2d057ca71ce18132c7cae3dbc1406736bda1ff7c48a71d511bccdd0abf1ccbb2dce3dfa5b4e0eb315c5e5f696af6d1bff574dcd00a0ecc68eeb46ead76d56b347b9e148d08e88cd950e37c313b50943a14ffb7de77478d83cca09ec33df7d73a2bd9516a7b7e4230d93219ace17da04f829e697f3a8f0210c1866671e33d332c0bef36c7f1ee57e077942e2f4c89b811b8f282bd95f607c6f47cf3eeaff3b8291b0fd46cc1ba9d0a7139af546a9a71edfdc8d7a81fcf04f45e7cde73c04431685a6", &(0x7f0000000100)=""/84, &(0x7f0000000180)="8d59759452fbaa1b1a6e28ce69ceefdb9ccff58d8871700f2bb56e4ddb7f44a8ef50a068ab314542a2293b7f3c1307bc5da8a718fa12e160940fef4a2d8e4043c1069bceb5645a4311faed28416bbfa3afc50f4029b9", &(0x7f0000000200)="d4e6a8672c0bea4c10d9d2492dbf9906acdf25b03a17adb14753e4112fe62fb9004400110c3107b966855a5992d30763d39ebe7cd41425d3a3406384f9e701b7ad84cfd1b8116745c1a8893ea5918c100ac622d423bab37df21b1210feeefb33b3b5bca5970a89b292a3f39559ef871504ba2fc7594f38591966ce2baf332bc25d003a7ac5e0199e8a35458928c1f80c8789fc4b1df5ba30311eeb7481ca391f7f7e613b70b3e719e10be5987b61207fb86ca785732f7be2d3fbb0cb4eeb", 0x3, r0}, 0x38) (async, rerun: 64) socketpair(0xf, 0x3, 0x0, 0x0) (rerun: 64) 21:43:01 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockopt$ax25_int(r1, 0x101, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={[{'-'}, {'\x00'}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}], [{@fowner_gt}, {@measure}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000003c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) recvfrom$ax25(r1, &(0x7f0000000300)=""/49, 0x31, 0x40010102, &(0x7f0000000340)={{0x3, @default, 0x3}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = accept$ax25(r0, &(0x7f0000000140)={{0x3, @null}, [@null, @bcast, @null, @netrom, @default, @remote, @rose, @default]}, &(0x7f0000000240)=0x48) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@null, @bcast, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @null, 0x80, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockopt$ax25_int(r1, 0x101, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={[{'-'}, {'\x00'}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}], [{@fowner_gt}, {@measure}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) (async) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000003c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) (async) recvfrom$ax25(r1, &(0x7f0000000300)=""/49, 0x31, 0x40010102, &(0x7f0000000340)={{0x3, @default, 0x3}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) accept$ax25(r0, &(0x7f0000000140)={{0x3, @null}, [@null, @bcast, @null, @netrom, @default, @remote, @rose, @default]}, &(0x7f0000000240)=0x48) (async) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@null, @bcast, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @null, 0x80, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) 21:43:01 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/136, 0x88, 0x10140, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:43:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1000, 0x10000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1000, 0x10000) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:43:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x5, 0x1, 0x59fb, 0x200, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000000)="8eb2d057ca71ce18132c7cae3dbc1406736bda1ff7c48a71d511bccdd0abf1ccbb2dce3dfa5b4e0eb315c5e5f696af6d1bff574dcd00a0ecc68eeb46ead76d56b347b9e148d08e88cd950e37c313b50943a14ffb7de77478d83cca09ec33df7d73a2bd9516a7b7e4230d93219ace17da04f829e697f3a8f0210c1866671e33d332c0bef36c7f1ee57e077942e2f4c89b811b8f282bd95f607c6f47cf3eeaff3b8291b0fd46cc1ba9d0a7139af546a9a71edfdc8d7a81fcf04f45e7cde73c04431685a6", &(0x7f0000000100)=""/84, &(0x7f0000000180)="8d59759452fbaa1b1a6e28ce69ceefdb9ccff58d8871700f2bb56e4ddb7f44a8ef50a068ab314542a2293b7f3c1307bc5da8a718fa12e160940fef4a2d8e4043c1069bceb5645a4311faed28416bbfa3afc50f4029b9", &(0x7f0000000200)="d4e6a8672c0bea4c10d9d2492dbf9906acdf25b03a17adb14753e4112fe62fb9004400110c3107b966855a5992d30763d39ebe7cd41425d3a3406384f9e701b7ad84cfd1b8116745c1a8893ea5918c100ac622d423bab37df21b1210feeefb33b3b5bca5970a89b292a3f39559ef871504ba2fc7594f38591966ce2baf332bc25d003a7ac5e0199e8a35458928c1f80c8789fc4b1df5ba30311eeb7481ca391f7f7e613b70b3e719e10be5987b61207fb86ca785732f7be2d3fbb0cb4eeb", 0x3, r0}, 0x38) (async, rerun: 32) socketpair(0xf, 0x3, 0x0, 0x0) (rerun: 32) 21:43:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r1], &(0x7f0000000100)=[0x1, 0xd290, 0x1f, 0x401, 0x9, 0xfffffffeffffffff], 0x1, 0x2}) [ 1421.037023] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1421.060796] ERROR: device name not specified. 21:43:02 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) [ 1421.133278] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:02 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_init_net_socket$ax25(0x3, 0x2, 0x1) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) recvfrom$ax25(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x2000, &(0x7f0000001080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:43:02 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r0}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x101000) 21:43:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000200)={0x40, &(0x7f00000001c0)=""/64}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x0, 0x54f8, 0xd5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000080)=[r1, 0x0, r3], 0x3}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:02 executing program 5: socketpair(0x5, 0x3, 0x80, 0x0) r0 = socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001440)={0x3}, 0x4) recvmsg$kcm(r0, &(0x7f0000001480)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/92, 0x5c}, {&(0x7f0000001200)=""/153, 0x99}, {&(0x7f00000012c0)=""/124, 0x7c}], 0x6, &(0x7f00000013c0)=""/12, 0xc}, 0x10101) 21:43:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r1], &(0x7f0000000100)=[0x1, 0xd290, 0x1f, 0x401, 0x9, 0xfffffffeffffffff], 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r1], &(0x7f0000000100)=[0x1, 0xd290, 0x1f, 0x401, 0x9, 0xfffffffeffffffff], 0x1, 0x2}) (async) 21:43:02 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000001040)={0x1000, &(0x7f0000000040)="07f4222d22f16d3a6dade5b174c164fb94ce3d478abbee6784b12212d25566a9bc5bc11df87c50a30a390a2076349221ef22a0a2af4028f9889a09ba5def9ef4338b74348e506b214ca04f0f6b29e9fc97009a9f983778f089fe0e1bd85d25e57a8aec8c18990af7bad7b8a2bf73b6c9271d1499c5ed5a83b7cbcd71cdc910521db2bf101a26dad9f3d65750dceebb3f130234f087ad393f2e8a0dac348806bcebc3db2d9a419f01322a0c7d582c04c125a687472276469f3b505c980616cb3d4ec1d4ec3f4fdd4283c5d12f0f0407e76eea4f9c00b99edb0a376477ca8abe054382faa9c4242733aac03d5920764f0fc96205caf8f24b4aaab915e87c2ad720a61102d9d3a957932f572e7f8dcc336cdc53d6ffdea1930ff963e87e9b48a4a727c0a9272e2f7ab9ba84b6d335fae8b25573660d9a417269840855c7608776e6c7f9ff4052844a65ea0530953b95fbc0896a914678836482181f73943de365275d14a3ab7c54e022e80ec3e1ad637ff4e09c19d2b853ae969bc5aa8a712e137a9887f2237f2e3b4975d9003db9f346df492805e8d50c73dc55dce8a347ff3f5e922a5ca6a4bbde53c076615a426b6ed51db8a746de8d69fda60d5c1282c618b846e81fce0abae0c6e0e54e5812b8210fadbd2a690c0880538f2f9c6fcbe40e6c187b258d9442ac66eb250e3c4a3139ba1d5214e821002056798c5096f6bd05b38bfabc6df38aaa37e8b5b712cf29f877035fa8a0ba80f2cea5675324534076b67cf395396206b1251b5eee68485948df9fc32d27bc701eae3f6647380e0f42e384f6108caf7dbf663717d49cd4ae599738c4a692a04965647c7bf5329b5d6402b4ac97b338e5bdd12ffdd0e755a2dff9f59a5c2e676abc64d40b219637140c3b4fa2b9114e09f7b8cfa5e521be0450039d382aa164a727c3e37f945d2c57e7796bbd5d9438412ebf7ca5ec53cd30fbd65f2cc9f5dd1cab6852cf913ab86750e9600a45bfdfe88524d55eb01c86389040d65b82e4bc643e9791ad571c22220a3ec16dcd4590e7e1742ae77f785e8723226e4c6cac3bcd81dbf0f8d143c451ee257df880af2ac10153818509a9c2fa7f2a591242dfe43a29e688454dbe299a664639d74ce8ef97c37694779662295b27e4a1cb9096f301e2bb5c7fd5b8f2075f8b61996df14ce3a3c86f7dbf67af5d1e0b4689c0097ffac76a204d0050c7abceffa93b9e793bf8dc95bbabfa82fececa41568bac7655ccf4b735187c6b30f94907ba9ec28a5ee12476e98ade56911fc662aeb6af5452c0727bc0256d46a935eb17fc9d797c26af0d12c91414cff3281770e3fc04d5179dc346def0392a37325758eb03d8454abe3f937616b03e9d385c318679dcfe138d7e20e97fe9224a99b329c7c87f0213f7adb47191ea100f68025367c755a35103c33751128bc6789de5b54ccbf2106819214251525313ae33260bde243f5e3d93bea861dd988c70dab3c61378e14c9ac40009cbd69e5f764aaa1404634159f070ea52a530e6624637c74060c65925d89f67cde06bbc20e92cc17cde76828ff26c3a1d55c013b525b410a90502f7b3932a32af1fd85fcf79bf23d25f51db59fa2ec682fc0ecf4ec275844634ebc40e7d06f10f152380c4c579d9e9cae7c67efa7c9064dc30c3ec66d3034a58bf425ed11227aa9394c241f402cd24dca32f19c58c138a8dbe47b02d582bcb1d7bb03cbad56ff344afd88ecc172c4df3473140b00623139f97ace753aa73abd4408a2b070a454ec6cfa1a8269a9c5162f16ae3aa3bbb913305ef1768f6e16d10c45c8ee480c340dc3d6658f7737445e216c0d02d13817411e38c0c7bff1d861524e41e47c2b8940711f91ec4001b8921955d9db0d85c91b722f2c08280896c81d2a8d241d1e4153a25a945e96a59368ccc7394f35a7b58c6b2af8071d7513e755e26ac50f3c0bba25f69d6b0a4df6abc47e2dbeebc10baf56d96886ae0065ca9ac39cbf0bda55bf99271f8a9ea592612c581b7105fc14e8febdc73cc24043b8338d912629e4500e19b98734a84df49d319c8c258987c47f793e489edc301765f7b1d6b11a221ce368840467ef7998156c9f10509af8ca40bc01a0888161ee7ebb5d28f22d57c0c9e7dee3d07190c22618394ddeb7a85067334154ade11b299eedb6e9192b74d85a548d5e23f7f67c46a1499742ca8c6a23015679d8b4fcc6048bb5b0b8e6da7f88bc1222944d731a300f222f7acc6e3a113f03344b87829e251a09771955d8ccd23a132022884d4f133d776fad505093527c5eb22e2cf20a6027fdddbae159cccaa1ac65db498e32f63b4bd63400f9c21993aebd9b1636af3e39e937c9feec6db9193cc0cd314f50bc0eb06293cdb104a8ce0f5b730712ab9ec6cea5a57782da2ba4b0bc69f8da1e3b205c7cb7e9dbb9ac0f551bd275a2ee44ccacd5bec8a489b2057635e49109561c83bd41899d8241ddd06d703bb033ece6d1bd86e0bfabea1c78c85e08262ffe9ceb134cd0cb339583d626a54110a6365e2a4e265f01324189a3575094cab358e3d1ef5341da542db43edf8023b6b4b843f1a5154499b9b0a5108a433b5b79cbfa879fc0c11b181469038a975d4b78305e38b1d2901f214aa71b4985adf55c98cd4bc8341ac51eec0d313b99bf80af2e4b590665a7a9945e5738d1de295571403bcc3500aee3089adb03726425dd21ef95347d30426f8a3a3339359b0dacced8b88413b4355fb807efd84534f8d5d8077de69bd47fb21f04a6f3525de218aa8b7865f01deb5d2d1f45569cc7d9ef0cc1641d8b217bf3f595ef92acb016207c5eb2c2ea6bb18fd453e08b6e0cd3f4f6d3e0e0107c5d53e341eb04eff81ee14295193eed2e8cecd494d8ca4ff5104879d8321a8c4976c51b31bf4d6d5b4d9f054377fab663bfe6c5b1cac7fbf63cc4e2295095a8907d73f747864843377fad4eca24e31205b03d53fa7cb6c112c49d39e88747a091ee18dbe20c37f76b08ee0dae589786809a487f888de86fe766c91efb867434d16f9fad69408a8f6f81a60ce5cf94f049202413c76fbda2ba83162b75dbf17cede789529156fd2616b1a8f751eeb763f7fca099ab69367d7122804af3f2c20b2d1a1e2c9a41f30867cd3614eb44e5463934d0456180f5b5708ad4230aa37633baff3529f7b0e1cc78015812030cbff3bf2265b60f298e5037d65ccfaa989c0aa45aadfd8d7d1d5c3b4e2345b2d2a152b43a0e689c0fea5052ff219ce16bd7e492a61fc700399986a9edea66a4f88e873433427ec73104594fd0f08d5a0024c0753c647087b740fdd087462afebd1de7222dffb5c517f3b88ee7a38a259bd26a02c56c2770733504c938f49bc6d3aa94815d11be6fb822ed487baf246bc896cde591cc8a093be53904a22a2202cd65c776bbb3bd51a8100aa316466e50e774ba44d2d9e4c8d7f9f0ee060ce215fd7bb24df90fadbb94d184735239d9459a908a04072deb30b6b2cc1b668f29084fbb0625e228fa29cb7d9cc7f86c5450444b5aede2d92eacaa62d3eed5fc245ec6d876e2ae07dff4fb3355e2453347a74779e0362ebcafe9386f295de49525883eac50400412b5dd65b2524501162ab3996e75d27649131f9f5238327b99ad15576bf5dfefd32f0c56c6516098fabbcac283a0033828e85e69edc47f604d5f302cea8071f510c85113254dc1d58e1a0beecd8a34861141a0ca07ebc7703a48a3648900f6ef99f1004ab32a1511b2cccde16fe40b4668437dad158e3ad780e2ac567f0a7dcc578e54c127db75d9845382a875f634eaa30b43a9eb477a4065008333f97a6a7236d4517fa90cc58b4ff5696dae0d9066c4e1a9f39c3c9d616fd821ed1121144c86b6691916aa32e4757aaf7c748c65c58f924aa45aed1e7df55223f534847b11f6908e5a4d2d6704f161f04043b66e6bf09926f2214a178b4c85365eab71ecd6b858092fa5d04bde2f99185a49c97a5e20bcf7d07e2a1f8b15f17fa8dfa7baa2cbbaa41544d2b316aea4508b8b16e50519caeffe134e62b8ab0db88ab642d278ee2801ecba25aacc2fe7e7dc279eeb2ff29e357e6f508bf51b30fcbd3181c432eebd418b2a6aeaf90d2bb48b591ba706b69a3a99d16d180f7857c55c7894174dc52f848206555f3b54eaf2c116e446d24cdf4595bf0852bbf48300908f982434a0681337627a3f2dda9a9c659e0c3fc699a74796847245ba2716d903f23f5ab2253499dce0d4b84c95cb90c8aaf6b2e0d68fe25e522b5c6d0688480543fb382982e13a5abefdf364dc463998bf79675506bf78784b3b3373e7176f6bf281bf6e09bc3df886949c4164921fd6e8bf790ac1f90ecbebc146db0727d8d3506fab93584a78756d36128bef7635caf3cd8a83c1685506e923b8af4afd6b29026db4ece51ec61354059396005245327aec618f18d7607116080a4ff1b826842c77930dd5d003e7c0b451921fdeca5b2303f80d55fe4c93b36cd6749622731071290b7a35b2f100eb31f602bb432a490c7bdc30262389624675c5ac8a9507ed5198e957aa9df26ad380ede0d60061de2ab41e457641321b1329ea69768dff156694fbd9c799e20ab09983f886f4f838e7fd85c30592e1bf5b1bac393f32221fc328c31a6f2b511a29d7f4d0b08920be0b78d5db24d69b15a2294e58656f8a331319fb9e29583f118510c6736940751d7992f8744fb3bfca3514060c19967f2107fcfc0fb13b1225662ea5cc45a6945d5fc6353b2592fed3528ba407de036b7a5f6edf71145fb2a2245028aa113b4daeef60d9b5860c00e76d6b80d01b36b0f0a457c319d72207164161e629d91a02605da6c5b3bacdb08201e03f77839f779a02dda6b3c7fa03917676738518f6bdfe37663e154515b1144f5deaa11073ddd08bdef4ca6838104397f141e59472613f7c4cb8ebf5d00c61cb6f75f911c2bda35feef70cf2b7cc5c75fe22f7852b0958311d9ba273f233b377d8a90c504c4170dcff4b4af29a14e814ba570114220348f41a0b0ff9a4b110228c83f963b129a0462fbd8643480dfd9fd14728e2f1c5284f52e0953560feb383dacaed8a3244774cd4551db8d980909eed609bc7ba5f2a27baddc28fa3897440b28bbc448dbbe84897efc82c6ffdadd155e0805e17ac1ae3b6c3d6308cd80ded57c41fb180a740209ecee371b404978c09acf5623b0d99b02d628512e5edf2d7883ced41b1ed52d0093a2e0e33432dc8246c2eedc95a7b578d61782c2d00fcc52f25be72841fb05bfc5313340b390519d2e3eb0365a648ccfd6e1da1c8a9264b9231439dbaf69da71f4a8ebc09c7dd161d0195d7dc1de0a757fc5d0b3f5b8fb95c72c919f84b8a814c97c16564f32ee57deb645f7a954dfca93f717e8bfc6b6dda66d1962c0f64d1dd61a5adec0f9491006d59f9d59f4454647533c7756321277a3acda6e2173bbd3b3ca82f277bbf5d17d341d2827b3c74c2975aa09a98ebbc4b269fddf9ca2242ead53cfde0bda34c45933c45653bc7512e73149eb7759fc71fbe55efe84acf34ef44ed3e6f9e6d1ea3db2d50369e10e329130e97217e39bb8205c68be16c0596ac2d23c0250b54118d548293e61f4d2905346fb0fd06a5b97c2c3a224933a9ea370e75c7eecf354cfdd946f9c0230f2135b1d92f34f296709aa30f21c4665a909007453fa8eefa9831bc0a5da01b44347cd2f55c7c8bd9bd558485355f7620ce4e1bc4571ec0d1f63cd19bbfc7f672e0cf61ece71689327cd02efbd82d5b212ce16397b98ecf945cbfcffb54075b8"}) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f00000015c0)={&(0x7f00000011c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001240)}, {&(0x7f0000001280)=""/35, 0x23}, {&(0x7f00000012c0)=""/76, 0x4c}, {&(0x7f0000001340)=""/225, 0xe1}, {&(0x7f0000001440)=""/116, 0x74}], 0x5, &(0x7f0000001540)=""/73, 0x49}, 0x40000021) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000001080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) recvmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) getpeername$netlink(r3, &(0x7f00000010c0), &(0x7f0000001100)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r4}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000fc0)=[0x1, r7]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0x1, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@bloom_filter={0x1e, 0x7, 0x1, 0x200, 0x1814, r7, 0x3, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0xa}, 0x48) getpeername$netlink(r3, &(0x7f0000001140), &(0x7f0000001180)=0xc) 21:43:02 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r0}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x101000) 21:43:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x130, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x100, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "980c3341f79b6032987d6cf883039b2004d709a36d2f1b5569bc372829b45d09"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6fc144fc66677e09d56e340cf33f7dc243f3b9abd3e216e2edd75cbf0dafba3e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d7c509b36f2ec5fed0742d63ad426032"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "623edadcd20a9281a734abf188d9e60ee77c6a492d778fb7764027f97fc8506b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2}, 0x4085) 21:43:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r1], &(0x7f0000000100)=[0x1, 0xd290, 0x1f, 0x401, 0x9, 0xfffffffeffffffff], 0x1, 0x2}) 21:43:02 executing program 5: socketpair(0x5, 0x3, 0x80, 0x0) (async) r0 = socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001440)={0x3}, 0x4) (async) recvmsg$kcm(r0, &(0x7f0000001480)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/92, 0x5c}, {&(0x7f0000001200)=""/153, 0x99}, {&(0x7f00000012c0)=""/124, 0x7c}], 0x6, &(0x7f00000013c0)=""/12, 0xc}, 0x10101) 21:43:02 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_init_net_socket$ax25(0x3, 0x2, 0x1) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) recvfrom$ax25(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x2000, &(0x7f0000001080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x1) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) recvfrom$ax25(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x2000, &(0x7f0000001080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) 21:43:03 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r0}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x101000) [ 1422.098571] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 21:43:03 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r2 = accept$ax25(r0, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockname$ax25(r2, &(0x7f0000000240)={{0x3, @null}, [@netrom, @netrom, @netrom, @default, @remote, @remote, @netrom]}, &(0x7f0000000180)=0x48) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000080)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x56}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000340)={0x3, @default, 0xee00}) getsockname$ax25(r3, &(0x7f0000000380)={{0x3, @null}, [@rose, @remote, @netrom, @rose, @default, @null, @null, @rose]}, &(0x7f0000000400)=0x48) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@netrom, @bcast, @rose, @rose, @netrom, @null, @default]}, &(0x7f0000000000)=0x48, 0x80000) 21:43:03 executing program 5: socketpair(0x5, 0x3, 0x80, 0x0) (async) r0 = socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001440)={0x3}, 0x4) (async) recvmsg$kcm(r0, &(0x7f0000001480)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/92, 0x5c}, {&(0x7f0000001200)=""/153, 0x99}, {&(0x7f00000012c0)=""/124, 0x7c}], 0x6, &(0x7f00000013c0)=""/12, 0xc}, 0x10101) 21:43:03 executing program 2: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="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", 0xfb}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0xffff, 0x6, 0x3f, 0x0, 0x800, 0x5, 0x10000}) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x80000) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000240)=""/81) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1]}) 21:43:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x7fffffff, 0xe2, &(0x7f0000000080)=""/226, 0x0, 0x15, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xe}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600), 0x8) r4 = syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x5, &(0x7f0000000b00)=[{&(0x7f00000006c0)="8f5cb5d4ee849caf903feee5fc307ccb20686bcb535ba034f7b6fb364eeaf9d18999b238618daed734f336866876e6057fd288da1d36625b52e7a39c59be135d089a6bbb37eccfbda1624bb3fde973b43f901b431166c1202552d46507ca1e5388224d9720313559a4a747c82a742dae527313ce31fbdde7daa850230ac2513269a2739f47289e7d97341d654bc94c00a8464553adf1211af450", 0x9a, 0x101}, {&(0x7f0000000780)="c0f8acec24e350b9c635d207d8745bb40ee91f0bf974a1601d4e3d8f332806382995cd1c74498b009adc8e74e8234cac7e6d6c4e4d623f671ac94c76ec3c91c459ca3c51bb5489f7a0f7a1c005814338f846f48552e3fc97e6c040a50b005a294b7636c9d2eef641d3f808e402a7ada4b13ca7ab6f038c091a1ab2f31ad9b73e65b19d9ca9bfba1237685ffa21906954fb371401e0ed45df6e1c49add73825ee9fc6d0ae21033d57d69283980743085a1257e132d18c1fb04fa601910b1368b0fa180c90faa9b63b5f3bb258e902442ca474f7fc201c496e", 0xd8, 0x8}, {&(0x7f0000000880)="8cb296fd1069721ce26ca0f9f8aea579b1a693054c4e34eca2ba3dc7544f4b985062b0926a53f416047c11c5075c00ceb3ea745bd893e3db87012293ba86132c91c946f1d5d2a1ebaf3ac5b90f80921098ad74dfeda255a2bb20a994d31b574df36c1e124fa9af93f5436f6559bb320856921250993e4e81028d387735744881fb360df4615b24e0501f17c468b1f900ca58f60c4708b9357e6b2170bd2026d81802db4298e1b07b2731f715297105bd5fe08f2bf710a50f8c079a44a2077e960adcb91bbf35072dc108bf8bf8befd90251acb0bf7efb0a107a6b3b0d7363397a0bd2e00db7ee161cb0d954cd77d5d2b7cd3", 0xf2, 0xe3}, {&(0x7f0000000980)="72ad25ab2a729bf7650602a5d3550f7ff5c36f1df9f2c4158cb33373c4c5038508fab70c0cad141c62cbf21b0bd54eee6d3ab0c8038b286ca6c2f92b731969d9e1189025b088f10181948d0dec8882cec94c07e83465a0a59777edb2b97b93ff5ecf7b60b2fcb30c4dbb078b20ecd7d886f55d201bff9438bfcb0371c4a4e30a3c864d717756e0178bbe3dbe219e3bc8c20a7e0de9a33609202cff5bcfc5416d6e54539cd90038f3edc328bb5244361848", 0xb1, 0x8}, {&(0x7f0000000a40)="97704891e643f0e342fa438b15ae9682b9abcb7db3652e062cfe3b04a788c1cf0223ada0121903c5a7c8003003bf58ba709001d4cadea6e3da9fbb94dadee03b51fad6ab4b826d6be6284740f156156ae28419eb1d6b80049819d1a7473c93c7972e7908e39319347e9c3e7047561ee164dc5d625577021cd9178b93bf4f1407267443fdc3", 0x85, 0x4}], 0x40000, &(0x7f0000000b80)={[{'-'}, {'syzkaller\x00'}, {'\x00'}, {'*%:('}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}, {'\x00'}, {'$\'%,.'}], [{@fowner_gt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x37, 0x30, 0x39, 0x1d, 0x35, 0x64], 0x2d, [0x5a, 0x32, 0x62, 0x33], 0x2d, [0x63, 0x33, 0x66, 0x61], 0x2d, [0x65, 0x35, 0x30, 0x66], 0x2d, [0x39, 0x38, 0x66, 0x37, 0x61, 0x36, 0x36, 0x35]}}}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) getdents64(r4, &(0x7f0000000c80)=""/236, 0xec) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000d80)={0x5, 0x8, 0xdc, 0x0, 0xfffffff9, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000dc0)={0x3ff, 0x3, 0x6}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000e00)) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r2}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={0xffffffffffffffff, 0x7f}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x3, 0xb, 0x6, 0x4, 0x9}], &(0x7f0000000e80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x17, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0x10, 0xea6, 0x7}, 0x10, 0x201ab, r5, 0x0, &(0x7f0000000fc0)=[0x1, r6]}, 0x80) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:03 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x5, 0x9, 0x3, 0x2}) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x400a, 0x8000, 0x5, 0xfffff1b2}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={0x3, 0x7, &(0x7f0000000180)=[0x3, 0xfffb, 0x2, 0x87, 0x3f, 0x6, 0x54], &(0x7f00000001c0)=[0x6], &(0x7f0000000200)=[0x5]}) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000280)={0x4002, 0x3, 0x3ff, 0x8745}) [ 1422.300217] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 1422.308793] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1422.336440] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de 21:43:03 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000001040)={0x1000, &(0x7f0000000040)="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"}) (async, rerun: 32) r1 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32) recvmsg$kcm(r1, &(0x7f00000015c0)={&(0x7f00000011c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001240)}, {&(0x7f0000001280)=""/35, 0x23}, {&(0x7f00000012c0)=""/76, 0x4c}, {&(0x7f0000001340)=""/225, 0xe1}, {&(0x7f0000001440)=""/116, 0x74}], 0x5, &(0x7f0000001540)=""/73, 0x49}, 0x40000021) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async, rerun: 32) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000001080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async, rerun: 32) recvmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) getpeername$netlink(r3, &(0x7f00000010c0), &(0x7f0000001100)=0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r4}, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000fc0)=[0x1, r7]}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0x1, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@bloom_filter={0x1e, 0x7, 0x1, 0x200, 0x1814, r7, 0x3, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0xa}, 0x48) (async, rerun: 32) getpeername$netlink(r3, &(0x7f0000001140), &(0x7f0000001180)=0xc) (rerun: 32) 21:43:03 executing program 2: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="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", 0xfb}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0xffff, 0x6, 0x3f, 0x0, 0x800, 0x5, 0x10000}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x80000) (rerun: 64) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000240)=""/81) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1]}) 21:43:03 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x5, 0x9, 0x3, 0x2}) (async) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x400a, 0x8000, 0x5, 0xfffff1b2}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={0x3, 0x7, &(0x7f0000000180)=[0x3, 0xfffb, 0x2, 0x87, 0x3f, 0x6, 0x54], &(0x7f00000001c0)=[0x6], &(0x7f0000000200)=[0x5]}) (async) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000280)={0x4002, 0x3, 0x3ff, 0x8745}) 21:43:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x7fffffff, 0xe2, &(0x7f0000000080)=""/226, 0x0, 0x15, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xe}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600), 0x8) r4 = syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x5, &(0x7f0000000b00)=[{&(0x7f00000006c0)="8f5cb5d4ee849caf903feee5fc307ccb20686bcb535ba034f7b6fb364eeaf9d18999b238618daed734f336866876e6057fd288da1d36625b52e7a39c59be135d089a6bbb37eccfbda1624bb3fde973b43f901b431166c1202552d46507ca1e5388224d9720313559a4a747c82a742dae527313ce31fbdde7daa850230ac2513269a2739f47289e7d97341d654bc94c00a8464553adf1211af450", 0x9a, 0x101}, {&(0x7f0000000780)="c0f8acec24e350b9c635d207d8745bb40ee91f0bf974a1601d4e3d8f332806382995cd1c74498b009adc8e74e8234cac7e6d6c4e4d623f671ac94c76ec3c91c459ca3c51bb5489f7a0f7a1c005814338f846f48552e3fc97e6c040a50b005a294b7636c9d2eef641d3f808e402a7ada4b13ca7ab6f038c091a1ab2f31ad9b73e65b19d9ca9bfba1237685ffa21906954fb371401e0ed45df6e1c49add73825ee9fc6d0ae21033d57d69283980743085a1257e132d18c1fb04fa601910b1368b0fa180c90faa9b63b5f3bb258e902442ca474f7fc201c496e", 0xd8, 0x8}, {&(0x7f0000000880)="8cb296fd1069721ce26ca0f9f8aea579b1a693054c4e34eca2ba3dc7544f4b985062b0926a53f416047c11c5075c00ceb3ea745bd893e3db87012293ba86132c91c946f1d5d2a1ebaf3ac5b90f80921098ad74dfeda255a2bb20a994d31b574df36c1e124fa9af93f5436f6559bb320856921250993e4e81028d387735744881fb360df4615b24e0501f17c468b1f900ca58f60c4708b9357e6b2170bd2026d81802db4298e1b07b2731f715297105bd5fe08f2bf710a50f8c079a44a2077e960adcb91bbf35072dc108bf8bf8befd90251acb0bf7efb0a107a6b3b0d7363397a0bd2e00db7ee161cb0d954cd77d5d2b7cd3", 0xf2, 0xe3}, {&(0x7f0000000980)="72ad25ab2a729bf7650602a5d3550f7ff5c36f1df9f2c4158cb33373c4c5038508fab70c0cad141c62cbf21b0bd54eee6d3ab0c8038b286ca6c2f92b731969d9e1189025b088f10181948d0dec8882cec94c07e83465a0a59777edb2b97b93ff5ecf7b60b2fcb30c4dbb078b20ecd7d886f55d201bff9438bfcb0371c4a4e30a3c864d717756e0178bbe3dbe219e3bc8c20a7e0de9a33609202cff5bcfc5416d6e54539cd90038f3edc328bb5244361848", 0xb1, 0x8}, {&(0x7f0000000a40)="97704891e643f0e342fa438b15ae9682b9abcb7db3652e062cfe3b04a788c1cf0223ada0121903c5a7c8003003bf58ba709001d4cadea6e3da9fbb94dadee03b51fad6ab4b826d6be6284740f156156ae28419eb1d6b80049819d1a7473c93c7972e7908e39319347e9c3e7047561ee164dc5d625577021cd9178b93bf4f1407267443fdc3", 0x85, 0x4}], 0x40000, &(0x7f0000000b80)={[{'-'}, {'syzkaller\x00'}, {'\x00'}, {'*%:('}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}, {'\x00'}, {'$\'%,.'}], [{@fowner_gt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x37, 0x30, 0x39, 0x1d, 0x35, 0x64], 0x2d, [0x5a, 0x32, 0x62, 0x33], 0x2d, [0x63, 0x33, 0x66, 0x61], 0x2d, [0x65, 0x35, 0x30, 0x66], 0x2d, [0x39, 0x38, 0x66, 0x37, 0x61, 0x36, 0x36, 0x35]}}}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) getdents64(r4, &(0x7f0000000c80)=""/236, 0xec) (async) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000d80)={0x5, 0x8, 0xdc, 0x0, 0xfffffff9, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000dc0)={0x3ff, 0x3, 0x6}) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000e00)) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r2}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={0xffffffffffffffff, 0x7f}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x3, 0xb, 0x6, 0x4, 0x9}], &(0x7f0000000e80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x17, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0x10, 0xea6, 0x7}, 0x10, 0x201ab, r5, 0x0, &(0x7f0000000fc0)=[0x1, r6]}, 0x80) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[0x4f7b]}) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) [ 1422.898311] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1422.927421] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1422.932439] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 21:43:03 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_init_net_socket$ax25(0x3, 0x2, 0x1) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) recvfrom$ax25(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x2000, &(0x7f0000001080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x1) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) recvfrom$ax25(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x2000, &(0x7f0000001080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) 21:43:03 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x5, 0x9, 0x3, 0x2}) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x400a, 0x8000, 0x5, 0xfffff1b2}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={0x3, 0x7, &(0x7f0000000180)=[0x3, 0xfffb, 0x2, 0x87, 0x3f, 0x6, 0x54], &(0x7f00000001c0)=[0x6], &(0x7f0000000200)=[0x5]}) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000280)={0x4002, 0x3, 0x3ff, 0x8745}) socketpair(0xf, 0x3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x5, 0x9, 0x3, 0x2}) (async) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x400a, 0x8000, 0x5, 0xfffff1b2}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={0x3, 0x7, &(0x7f0000000180)=[0x3, 0xfffb, 0x2, 0x87, 0x3f, 0x6, 0x54], &(0x7f00000001c0)=[0x6], &(0x7f0000000200)=[0x5]}) (async) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000280)={0x4002, 0x3, 0x3ff, 0x8745}) (async) 21:43:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x7fffffff, 0xe2, &(0x7f0000000080)=""/226, 0x0, 0x15, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xe}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600), 0x8) (async) r4 = syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x5, &(0x7f0000000b00)=[{&(0x7f00000006c0)="8f5cb5d4ee849caf903feee5fc307ccb20686bcb535ba034f7b6fb364eeaf9d18999b238618daed734f336866876e6057fd288da1d36625b52e7a39c59be135d089a6bbb37eccfbda1624bb3fde973b43f901b431166c1202552d46507ca1e5388224d9720313559a4a747c82a742dae527313ce31fbdde7daa850230ac2513269a2739f47289e7d97341d654bc94c00a8464553adf1211af450", 0x9a, 0x101}, {&(0x7f0000000780)="c0f8acec24e350b9c635d207d8745bb40ee91f0bf974a1601d4e3d8f332806382995cd1c74498b009adc8e74e8234cac7e6d6c4e4d623f671ac94c76ec3c91c459ca3c51bb5489f7a0f7a1c005814338f846f48552e3fc97e6c040a50b005a294b7636c9d2eef641d3f808e402a7ada4b13ca7ab6f038c091a1ab2f31ad9b73e65b19d9ca9bfba1237685ffa21906954fb371401e0ed45df6e1c49add73825ee9fc6d0ae21033d57d69283980743085a1257e132d18c1fb04fa601910b1368b0fa180c90faa9b63b5f3bb258e902442ca474f7fc201c496e", 0xd8, 0x8}, {&(0x7f0000000880)="8cb296fd1069721ce26ca0f9f8aea579b1a693054c4e34eca2ba3dc7544f4b985062b0926a53f416047c11c5075c00ceb3ea745bd893e3db87012293ba86132c91c946f1d5d2a1ebaf3ac5b90f80921098ad74dfeda255a2bb20a994d31b574df36c1e124fa9af93f5436f6559bb320856921250993e4e81028d387735744881fb360df4615b24e0501f17c468b1f900ca58f60c4708b9357e6b2170bd2026d81802db4298e1b07b2731f715297105bd5fe08f2bf710a50f8c079a44a2077e960adcb91bbf35072dc108bf8bf8befd90251acb0bf7efb0a107a6b3b0d7363397a0bd2e00db7ee161cb0d954cd77d5d2b7cd3", 0xf2, 0xe3}, {&(0x7f0000000980)="72ad25ab2a729bf7650602a5d3550f7ff5c36f1df9f2c4158cb33373c4c5038508fab70c0cad141c62cbf21b0bd54eee6d3ab0c8038b286ca6c2f92b731969d9e1189025b088f10181948d0dec8882cec94c07e83465a0a59777edb2b97b93ff5ecf7b60b2fcb30c4dbb078b20ecd7d886f55d201bff9438bfcb0371c4a4e30a3c864d717756e0178bbe3dbe219e3bc8c20a7e0de9a33609202cff5bcfc5416d6e54539cd90038f3edc328bb5244361848", 0xb1, 0x8}, {&(0x7f0000000a40)="97704891e643f0e342fa438b15ae9682b9abcb7db3652e062cfe3b04a788c1cf0223ada0121903c5a7c8003003bf58ba709001d4cadea6e3da9fbb94dadee03b51fad6ab4b826d6be6284740f156156ae28419eb1d6b80049819d1a7473c93c7972e7908e39319347e9c3e7047561ee164dc5d625577021cd9178b93bf4f1407267443fdc3", 0x85, 0x4}], 0x40000, &(0x7f0000000b80)={[{'-'}, {'syzkaller\x00'}, {'\x00'}, {'*%:('}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}, {'\x00'}, {'$\'%,.'}], [{@fowner_gt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x37, 0x30, 0x39, 0x1d, 0x35, 0x64], 0x2d, [0x5a, 0x32, 0x62, 0x33], 0x2d, [0x63, 0x33, 0x66, 0x61], 0x2d, [0x65, 0x35, 0x30, 0x66], 0x2d, [0x39, 0x38, 0x66, 0x37, 0x61, 0x36, 0x36, 0x35]}}}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) getdents64(r4, &(0x7f0000000c80)=""/236, 0xec) (async) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000d80)={0x5, 0x8, 0xdc, 0x0, 0xfffffff9, 0x9, 0x400}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000dc0)={0x3ff, 0x3, 0x6}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000e00)) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r2}, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={0xffffffffffffffff, 0x7f}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x3, 0xb, 0x6, 0x4, 0x9}], &(0x7f0000000e80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x17, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0x10, 0xea6, 0x7}, 0x10, 0x201ab, r5, 0x0, &(0x7f0000000fc0)=[0x1, r6]}, 0x80) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) [ 1422.949942] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1422.951123] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1422.958955] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1422.974714] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1422.989692] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1422.997694] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.003487] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.017081] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.018578] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.028456] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 21:43:03 executing program 5: socketpair(0xb, 0x5, 0x200000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x4000004) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x4, 0x401, 0xad8}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a22404}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) [ 1423.043313] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.045174] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.065868] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.080169] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.082613] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 21:43:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/151) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) [ 1423.089131] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.111510] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.130153] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.139212] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 21:43:04 executing program 5: socketpair(0xb, 0x5, 0x200000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x4000004) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x4, 0x401, 0xad8}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a22404}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) socketpair(0xb, 0x5, 0x200000, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x4000004) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x4, 0x401, 0xad8}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a22404}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) [ 1423.147659] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147670] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147680] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147690] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147700] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147709] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147719] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147729] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147739] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147749] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147758] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.147769] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 21:43:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/151) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/151) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) [ 1423.208701] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.226225] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.272076] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.280913] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.287796] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.293719] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.310738] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.315751] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.319835] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.340535] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.341712] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.349238] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.358781] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.369925] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.376179] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.383247] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.392661] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.400301] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.400312] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.400321] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.400331] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.400345] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.400355] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.400364] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.400374] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.400382] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.400392] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.416753] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.417405] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.430089] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.434448] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.443242] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.456529] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.460201] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.469782] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.477826] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.490436] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.494411] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.503986] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.511409] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.524335] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.528351] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.537665] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.545222] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.558267] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.562213] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.571507] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.579157] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.592297] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.596865] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.604767] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.614785] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.629255] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.631220] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.638833] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.648105] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.659526] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 21:43:04 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000001040)={0x1000, &(0x7f0000000040)="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"}) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f00000015c0)={&(0x7f00000011c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001240)}, {&(0x7f0000001280)=""/35, 0x23}, {&(0x7f00000012c0)=""/76, 0x4c}, {&(0x7f0000001340)=""/225, 0xe1}, {&(0x7f0000001440)=""/116, 0x74}], 0x5, &(0x7f0000001540)=""/73, 0x49}, 0x40000021) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000001080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) recvmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) getpeername$netlink(r3, &(0x7f00000010c0), &(0x7f0000001100)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r4}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000fc0)=[0x1, r7]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0x1, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@bloom_filter={0x1e, 0x7, 0x1, 0x200, 0x1814, r7, 0x3, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0xa}, 0x48) getpeername$netlink(r3, &(0x7f0000001140), &(0x7f0000001180)=0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000001040)={0x1000, &(0x7f0000000040)="07f4222d22f16d3a6dade5b174c164fb94ce3d478abbee6784b12212d25566a9bc5bc11df87c50a30a390a2076349221ef22a0a2af4028f9889a09ba5def9ef4338b74348e506b214ca04f0f6b29e9fc97009a9f983778f089fe0e1bd85d25e57a8aec8c18990af7bad7b8a2bf73b6c9271d1499c5ed5a83b7cbcd71cdc910521db2bf101a26dad9f3d65750dceebb3f130234f087ad393f2e8a0dac348806bcebc3db2d9a419f01322a0c7d582c04c125a687472276469f3b505c980616cb3d4ec1d4ec3f4fdd4283c5d12f0f0407e76eea4f9c00b99edb0a376477ca8abe054382faa9c4242733aac03d5920764f0fc96205caf8f24b4aaab915e87c2ad720a61102d9d3a957932f572e7f8dcc336cdc53d6ffdea1930ff963e87e9b48a4a727c0a9272e2f7ab9ba84b6d335fae8b25573660d9a417269840855c7608776e6c7f9ff4052844a65ea0530953b95fbc0896a914678836482181f73943de365275d14a3ab7c54e022e80ec3e1ad637ff4e09c19d2b853ae969bc5aa8a712e137a9887f2237f2e3b4975d9003db9f346df492805e8d50c73dc55dce8a347ff3f5e922a5ca6a4bbde53c076615a426b6ed51db8a746de8d69fda60d5c1282c618b846e81fce0abae0c6e0e54e5812b8210fadbd2a690c0880538f2f9c6fcbe40e6c187b258d9442ac66eb250e3c4a3139ba1d5214e821002056798c5096f6bd05b38bfabc6df38aaa37e8b5b712cf29f877035fa8a0ba80f2cea5675324534076b67cf395396206b1251b5eee68485948df9fc32d27bc701eae3f6647380e0f42e384f6108caf7dbf663717d49cd4ae599738c4a692a04965647c7bf5329b5d6402b4ac97b338e5bdd12ffdd0e755a2dff9f59a5c2e676abc64d40b219637140c3b4fa2b9114e09f7b8cfa5e521be0450039d382aa164a727c3e37f945d2c57e7796bbd5d9438412ebf7ca5ec53cd30fbd65f2cc9f5dd1cab6852cf913ab86750e9600a45bfdfe88524d55eb01c86389040d65b82e4bc643e9791ad571c22220a3ec16dcd4590e7e1742ae77f785e8723226e4c6cac3bcd81dbf0f8d143c451ee257df880af2ac10153818509a9c2fa7f2a591242dfe43a29e688454dbe299a664639d74ce8ef97c37694779662295b27e4a1cb9096f301e2bb5c7fd5b8f2075f8b61996df14ce3a3c86f7dbf67af5d1e0b4689c0097ffac76a204d0050c7abceffa93b9e793bf8dc95bbabfa82fececa41568bac7655ccf4b735187c6b30f94907ba9ec28a5ee12476e98ade56911fc662aeb6af5452c0727bc0256d46a935eb17fc9d797c26af0d12c91414cff3281770e3fc04d5179dc346def0392a37325758eb03d8454abe3f937616b03e9d385c318679dcfe138d7e20e97fe9224a99b329c7c87f0213f7adb47191ea100f68025367c755a35103c33751128bc6789de5b54ccbf2106819214251525313ae33260bde243f5e3d93bea861dd988c70dab3c61378e14c9ac40009cbd69e5f764aaa1404634159f070ea52a530e6624637c74060c65925d89f67cde06bbc20e92cc17cde76828ff26c3a1d55c013b525b410a90502f7b3932a32af1fd85fcf79bf23d25f51db59fa2ec682fc0ecf4ec275844634ebc40e7d06f10f152380c4c579d9e9cae7c67efa7c9064dc30c3ec66d3034a58bf425ed11227aa9394c241f402cd24dca32f19c58c138a8dbe47b02d582bcb1d7bb03cbad56ff344afd88ecc172c4df3473140b00623139f97ace753aa73abd4408a2b070a454ec6cfa1a8269a9c5162f16ae3aa3bbb913305ef1768f6e16d10c45c8ee480c340dc3d6658f7737445e216c0d02d13817411e38c0c7bff1d861524e41e47c2b8940711f91ec4001b8921955d9db0d85c91b722f2c08280896c81d2a8d241d1e4153a25a945e96a59368ccc7394f35a7b58c6b2af8071d7513e755e26ac50f3c0bba25f69d6b0a4df6abc47e2dbeebc10baf56d96886ae0065ca9ac39cbf0bda55bf99271f8a9ea592612c581b7105fc14e8febdc73cc24043b8338d912629e4500e19b98734a84df49d319c8c258987c47f793e489edc301765f7b1d6b11a221ce368840467ef7998156c9f10509af8ca40bc01a0888161ee7ebb5d28f22d57c0c9e7dee3d07190c22618394ddeb7a85067334154ade11b299eedb6e9192b74d85a548d5e23f7f67c46a1499742ca8c6a23015679d8b4fcc6048bb5b0b8e6da7f88bc1222944d731a300f222f7acc6e3a113f03344b87829e251a09771955d8ccd23a132022884d4f133d776fad505093527c5eb22e2cf20a6027fdddbae159cccaa1ac65db498e32f63b4bd63400f9c21993aebd9b1636af3e39e937c9feec6db9193cc0cd314f50bc0eb06293cdb104a8ce0f5b730712ab9ec6cea5a57782da2ba4b0bc69f8da1e3b205c7cb7e9dbb9ac0f551bd275a2ee44ccacd5bec8a489b2057635e49109561c83bd41899d8241ddd06d703bb033ece6d1bd86e0bfabea1c78c85e08262ffe9ceb134cd0cb339583d626a54110a6365e2a4e265f01324189a3575094cab358e3d1ef5341da542db43edf8023b6b4b843f1a5154499b9b0a5108a433b5b79cbfa879fc0c11b181469038a975d4b78305e38b1d2901f214aa71b4985adf55c98cd4bc8341ac51eec0d313b99bf80af2e4b590665a7a9945e5738d1de295571403bcc3500aee3089adb03726425dd21ef95347d30426f8a3a3339359b0dacced8b88413b4355fb807efd84534f8d5d8077de69bd47fb21f04a6f3525de218aa8b7865f01deb5d2d1f45569cc7d9ef0cc1641d8b217bf3f595ef92acb016207c5eb2c2ea6bb18fd453e08b6e0cd3f4f6d3e0e0107c5d53e341eb04eff81ee14295193eed2e8cecd494d8ca4ff5104879d8321a8c4976c51b31bf4d6d5b4d9f054377fab663bfe6c5b1cac7fbf63cc4e2295095a8907d73f747864843377fad4eca24e31205b03d53fa7cb6c112c49d39e88747a091ee18dbe20c37f76b08ee0dae589786809a487f888de86fe766c91efb867434d16f9fad69408a8f6f81a60ce5cf94f049202413c76fbda2ba83162b75dbf17cede789529156fd2616b1a8f751eeb763f7fca099ab69367d7122804af3f2c20b2d1a1e2c9a41f30867cd3614eb44e5463934d0456180f5b5708ad4230aa37633baff3529f7b0e1cc78015812030cbff3bf2265b60f298e5037d65ccfaa989c0aa45aadfd8d7d1d5c3b4e2345b2d2a152b43a0e689c0fea5052ff219ce16bd7e492a61fc700399986a9edea66a4f88e873433427ec73104594fd0f08d5a0024c0753c647087b740fdd087462afebd1de7222dffb5c517f3b88ee7a38a259bd26a02c56c2770733504c938f49bc6d3aa94815d11be6fb822ed487baf246bc896cde591cc8a093be53904a22a2202cd65c776bbb3bd51a8100aa316466e50e774ba44d2d9e4c8d7f9f0ee060ce215fd7bb24df90fadbb94d184735239d9459a908a04072deb30b6b2cc1b668f29084fbb0625e228fa29cb7d9cc7f86c5450444b5aede2d92eacaa62d3eed5fc245ec6d876e2ae07dff4fb3355e2453347a74779e0362ebcafe9386f295de49525883eac50400412b5dd65b2524501162ab3996e75d27649131f9f5238327b99ad15576bf5dfefd32f0c56c6516098fabbcac283a0033828e85e69edc47f604d5f302cea8071f510c85113254dc1d58e1a0beecd8a34861141a0ca07ebc7703a48a3648900f6ef99f1004ab32a1511b2cccde16fe40b4668437dad158e3ad780e2ac567f0a7dcc578e54c127db75d9845382a875f634eaa30b43a9eb477a4065008333f97a6a7236d4517fa90cc58b4ff5696dae0d9066c4e1a9f39c3c9d616fd821ed1121144c86b6691916aa32e4757aaf7c748c65c58f924aa45aed1e7df55223f534847b11f6908e5a4d2d6704f161f04043b66e6bf09926f2214a178b4c85365eab71ecd6b858092fa5d04bde2f99185a49c97a5e20bcf7d07e2a1f8b15f17fa8dfa7baa2cbbaa41544d2b316aea4508b8b16e50519caeffe134e62b8ab0db88ab642d278ee2801ecba25aacc2fe7e7dc279eeb2ff29e357e6f508bf51b30fcbd3181c432eebd418b2a6aeaf90d2bb48b591ba706b69a3a99d16d180f7857c55c7894174dc52f848206555f3b54eaf2c116e446d24cdf4595bf0852bbf48300908f982434a0681337627a3f2dda9a9c659e0c3fc699a74796847245ba2716d903f23f5ab2253499dce0d4b84c95cb90c8aaf6b2e0d68fe25e522b5c6d0688480543fb382982e13a5abefdf364dc463998bf79675506bf78784b3b3373e7176f6bf281bf6e09bc3df886949c4164921fd6e8bf790ac1f90ecbebc146db0727d8d3506fab93584a78756d36128bef7635caf3cd8a83c1685506e923b8af4afd6b29026db4ece51ec61354059396005245327aec618f18d7607116080a4ff1b826842c77930dd5d003e7c0b451921fdeca5b2303f80d55fe4c93b36cd6749622731071290b7a35b2f100eb31f602bb432a490c7bdc30262389624675c5ac8a9507ed5198e957aa9df26ad380ede0d60061de2ab41e457641321b1329ea69768dff156694fbd9c799e20ab09983f886f4f838e7fd85c30592e1bf5b1bac393f32221fc328c31a6f2b511a29d7f4d0b08920be0b78d5db24d69b15a2294e58656f8a331319fb9e29583f118510c6736940751d7992f8744fb3bfca3514060c19967f2107fcfc0fb13b1225662ea5cc45a6945d5fc6353b2592fed3528ba407de036b7a5f6edf71145fb2a2245028aa113b4daeef60d9b5860c00e76d6b80d01b36b0f0a457c319d72207164161e629d91a02605da6c5b3bacdb08201e03f77839f779a02dda6b3c7fa03917676738518f6bdfe37663e154515b1144f5deaa11073ddd08bdef4ca6838104397f141e59472613f7c4cb8ebf5d00c61cb6f75f911c2bda35feef70cf2b7cc5c75fe22f7852b0958311d9ba273f233b377d8a90c504c4170dcff4b4af29a14e814ba570114220348f41a0b0ff9a4b110228c83f963b129a0462fbd8643480dfd9fd14728e2f1c5284f52e0953560feb383dacaed8a3244774cd4551db8d980909eed609bc7ba5f2a27baddc28fa3897440b28bbc448dbbe84897efc82c6ffdadd155e0805e17ac1ae3b6c3d6308cd80ded57c41fb180a740209ecee371b404978c09acf5623b0d99b02d628512e5edf2d7883ced41b1ed52d0093a2e0e33432dc8246c2eedc95a7b578d61782c2d00fcc52f25be72841fb05bfc5313340b390519d2e3eb0365a648ccfd6e1da1c8a9264b9231439dbaf69da71f4a8ebc09c7dd161d0195d7dc1de0a757fc5d0b3f5b8fb95c72c919f84b8a814c97c16564f32ee57deb645f7a954dfca93f717e8bfc6b6dda66d1962c0f64d1dd61a5adec0f9491006d59f9d59f4454647533c7756321277a3acda6e2173bbd3b3ca82f277bbf5d17d341d2827b3c74c2975aa09a98ebbc4b269fddf9ca2242ead53cfde0bda34c45933c45653bc7512e73149eb7759fc71fbe55efe84acf34ef44ed3e6f9e6d1ea3db2d50369e10e329130e97217e39bb8205c68be16c0596ac2d23c0250b54118d548293e61f4d2905346fb0fd06a5b97c2c3a224933a9ea370e75c7eecf354cfdd946f9c0230f2135b1d92f34f296709aa30f21c4665a909007453fa8eefa9831bc0a5da01b44347cd2f55c7c8bd9bd558485355f7620ce4e1bc4571ec0d1f63cd19bbfc7f672e0cf61ece71689327cd02efbd82d5b212ce16397b98ecf945cbfcffb54075b8"}) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r1, &(0x7f00000015c0)={&(0x7f00000011c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001240)}, {&(0x7f0000001280)=""/35, 0x23}, {&(0x7f00000012c0)=""/76, 0x4c}, {&(0x7f0000001340)=""/225, 0xe1}, {&(0x7f0000001440)=""/116, 0x74}], 0x5, &(0x7f0000001540)=""/73, 0x49}, 0x40000021) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000001080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) recvmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) socket$netlink(0x10, 0x3, 0xf) (async) getpeername$netlink(r3, &(0x7f00000010c0), &(0x7f0000001100)=0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r4}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000fc0)=[0x1, r7]}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0x1, 0x58, &(0x7f0000001600)}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@bloom_filter={0x1e, 0x7, 0x1, 0x200, 0x1814, r7, 0x3, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0xa}, 0x48) (async) getpeername$netlink(r3, &(0x7f0000001140), &(0x7f0000001180)=0xc) (async) 21:43:04 executing program 2: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="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", 0xfb}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0xffff, 0x6, 0x3f, 0x0, 0x800, 0x5, 0x10000}) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x80000) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000240)=""/81) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1]}) 21:43:04 executing program 5: socketpair(0xb, 0x5, 0x200000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x4000004) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x4, 0x401, 0xad8}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a22404}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) socketpair(0xb, 0x5, 0x200000, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x4000004) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x4, 0x401, 0xad8}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a22404}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) 21:43:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/151) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:04 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000140)) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000180)) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)="7885d2abda68d667d6a3a2ce1ae07272862fbc936af5", 0x16}) getpeername$ax25(r0, &(0x7f0000000080)={{}, [@remote, @bcast, @rose, @rose]}, &(0x7f0000000100)=0x48) [ 1423.665097] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1423.672705] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 21:43:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000000)={0x0, 0x100}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:43:04 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048000}, 0x24008010) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x40, 0x7ff, 0x200, 0x5}) 21:43:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffb, 0x210400) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000000)=""/89) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:04 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000001d00000000006b0000f008000300bb167bee5dee9685c17bb0222806bc2b80eba5bf9d53ed11166c3c20eeaace3320bc1611b1478b85a3c9c41b7c47fa8c8cb5fa2dfbadc9b2e2274943c660d0300ce8e08cff92a011185231f472a12bf6cb478db74c14aa35f4b7baa5cfda0ec80f29ffd26796b3", @ANYRES32=0x0, @ANYBLOB="0a001a000802110000010000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x720, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) bind$ax25(r4, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) 21:43:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, 0x0, [0x4000, 0x0, 0x3, 0x4], [0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x1000000000000000]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x28581) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/165) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r2, 0x80000}) [ 1423.803491] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 1423.820944] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de 21:43:04 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048000}, 0x24008010) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x40, 0x7ff, 0x200, 0x5}) 21:43:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000000)={0x0, 0x100}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) [ 1423.859843] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 21:43:04 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0xb, 0x3, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x4, &(0x7f0000000b00)=[{&(0x7f00000006c0)="8f5cb5d4ee849caf903feee5fc307ccb20686bcb535ba034f7b6fb364eeaf9d18999b238618daed734f336866876e6057fd288da1d36625b52e7a39c59be135d089a6bbb37eccfbda1624bb3fde973b43f901b431166c1202552d46507ca1e5388", 0x61, 0x101}, {&(0x7f0000000780)="c0f8acec24e350b9c635d207d8745bb40ee91f0bf974a1601d4e3d8f332806382995cd1c74498b009adc8e74e8234cac7e6d6c4e4d623f671ac94c76ec3c91c459ca3c51bb5489f7a0f7a1c005814338f846f48552e3fc97e6c040a50b005a294b7636c9d2eef641d3f808e4", 0x6c, 0x8}, {0x0}, {0x0, 0x0, 0x4}], 0x40000, &(0x7f0000000b80)={[{'-'}, {'syzkaller\x00'}, {'\x00'}, {'*%:('}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}, {'\x00'}, {'$\'%,.'}], [{@fowner_gt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x37, 0x30, 0x39, 0x1d, 0x35, 0x64], 0x2d, [0x5a, 0x32, 0x62, 0x33], 0x2d, [0x63, 0x33, 0x66, 0x61], 0x2d, [0x65, 0x35, 0x30, 0x66], 0x2d, [0x39, 0x38, 0x66, 0x37, 0x61, 0x36, 0x36, 0x35]}}}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) getdents64(r3, &(0x7f0000000c80)=""/236, 0xec) readlinkat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/111, 0x6f) [ 1423.902017] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1423.941079] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de 21:43:04 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048000}, 0x24008010) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x40, 0x7ff, 0x200, 0x5}) 21:43:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, 0x0, [0x4000, 0x0, 0x3, 0x4], [0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x1000000000000000]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x28581) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/165) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r2, 0x80000}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, 0x0, [0x4000, 0x0, 0x3, 0x4], [0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x1000000000000000]}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x28581) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/165) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r2, 0x80000}) (async) 21:43:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffb, 0x210400) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000000)=""/89) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffb, 0x210400) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000000)=""/89) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:43:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000000)={0x0, 0x100}) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:43:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xbbe6, 0x4) socketpair(0xf, 0x4, 0x0, 0x0) 21:43:04 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3ff}, [@jmp={0x5, 0x0, 0xc, 0x1, 0x9, 0xffffffffffffffcc, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x22f}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x3f, &(0x7f00000000c0)=""/63, 0x41100, 0x9, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x3, 0x5, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x3411}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r4}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000fc0)=[0x1, r7]}, 0x80) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0x9, 0x8}, 0xc) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)={&(0x7f0000000a80)='./file0\x00', 0x0, 0x10}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x1141, 0x2, 0x2, 0x0, 0x1, 0x3ff, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x12, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x800}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ldst={0x1, 0x3, 0x1, 0x8, 0xd, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1000}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000640)='GPL\x00', 0x1, 0xf, &(0x7f0000000680)=""/15, 0x1e00, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x5, 0xff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x1, r7, r8, r9, r10]}, 0x80) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000040)=0xfffffff6, 0x4) 21:43:04 executing program 5: socketpair(0x15, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21:43:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, 0x0, [0x4000, 0x0, 0x3, 0x4], [0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x1000000000000000]}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x28581) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/165) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r2, 0x80000}) 21:43:04 executing program 5: socketpair(0x15, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21:43:04 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r2, 0x39}) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000040), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r3, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x1, 0x5, 0x2, 0x0, 0x8, 0x5, 0xa1}) 21:43:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffb, 0x210400) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000000)=""/89) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffb, 0x210400) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000000)=""/89) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) [ 1424.074615] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:05 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0xb, 0x3, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x4, &(0x7f0000000b00)=[{&(0x7f00000006c0)="8f5cb5d4ee849caf903feee5fc307ccb20686bcb535ba034f7b6fb364eeaf9d18999b238618daed734f336866876e6057fd288da1d36625b52e7a39c59be135d089a6bbb37eccfbda1624bb3fde973b43f901b431166c1202552d46507ca1e5388", 0x61, 0x101}, {&(0x7f0000000780)="c0f8acec24e350b9c635d207d8745bb40ee91f0bf974a1601d4e3d8f332806382995cd1c74498b009adc8e74e8234cac7e6d6c4e4d623f671ac94c76ec3c91c459ca3c51bb5489f7a0f7a1c005814338f846f48552e3fc97e6c040a50b005a294b7636c9d2eef641d3f808e4", 0x6c, 0x8}, {0x0}, {0x0, 0x0, 0x4}], 0x40000, &(0x7f0000000b80)={[{'-'}, {'syzkaller\x00'}, {'\x00'}, {'*%:('}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}, {'\x00'}, {'$\'%,.'}], [{@fowner_gt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x37, 0x30, 0x39, 0x1d, 0x35, 0x64], 0x2d, [0x5a, 0x32, 0x62, 0x33], 0x2d, [0x63, 0x33, 0x66, 0x61], 0x2d, [0x65, 0x35, 0x30, 0x66], 0x2d, [0x39, 0x38, 0x66, 0x37, 0x61, 0x36, 0x36, 0x35]}}}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) getdents64(r3, &(0x7f0000000c80)=""/236, 0xec) readlinkat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/111, 0x6f) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) socketpair(0xb, 0x3, 0x2, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x4, &(0x7f0000000b00)=[{&(0x7f00000006c0)="8f5cb5d4ee849caf903feee5fc307ccb20686bcb535ba034f7b6fb364eeaf9d18999b238618daed734f336866876e6057fd288da1d36625b52e7a39c59be135d089a6bbb37eccfbda1624bb3fde973b43f901b431166c1202552d46507ca1e5388", 0x61, 0x101}, {&(0x7f0000000780)="c0f8acec24e350b9c635d207d8745bb40ee91f0bf974a1601d4e3d8f332806382995cd1c74498b009adc8e74e8234cac7e6d6c4e4d623f671ac94c76ec3c91c459ca3c51bb5489f7a0f7a1c005814338f846f48552e3fc97e6c040a50b005a294b7636c9d2eef641d3f808e4", 0x6c, 0x8}, {0x0}, {0x0, 0x0, 0x4}], 0x40000, &(0x7f0000000b80)={[{'-'}, {'syzkaller\x00'}, {'\x00'}, {'*%:('}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}, {'\x00'}, {'$\'%,.'}], [{@fowner_gt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x37, 0x30, 0x39, 0x1d, 0x35, 0x64], 0x2d, [0x5a, 0x32, 0x62, 0x33], 0x2d, [0x63, 0x33, 0x66, 0x61], 0x2d, [0x65, 0x35, 0x30, 0x66], 0x2d, [0x39, 0x38, 0x66, 0x37, 0x61, 0x36, 0x36, 0x35]}}}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) (async) getdents64(r3, &(0x7f0000000c80)=""/236, 0xec) (async) readlinkat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/111, 0x6f) (async) 21:43:05 executing program 5: socketpair(0x15, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x15, 0x4, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 21:43:05 executing program 2: socketpair(0x3, 0x5, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000080)) 21:43:05 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = accept4$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom, @null, @netrom, @bcast, @remote, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept4$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@remote, @bcast, @default, @bcast, @null, @null, @null, @netrom]}, &(0x7f0000000180)=0x48, 0x800) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0xab, &(0x7f0000000000)="cfb82c97b88e5f8a49af141f83b50b063817474b69ae81e48ffaacc10e7439a11d283d4e1463aa47d65e7d9db02be1c6e5893a25333a5acb50d2d02276aec744d56a687073b00e0f9e6aec96a6a46e111b077f880fa2c18fd6a30e07aa5475d14524af1e48d7e63a0d9f42f423c889eb9c68b10f9b66faf9e977a20a5e179bd25766b490478584c9bdeffa118219462b89bb5aef0f590d900637399f1202b422abb73bf1aa9c4a17fcb293"}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:05 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r2, 0x39}) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000040), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r3, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x1, 0x5, 0x2, 0x0, 0x8, 0x5, 0xa1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r2, 0x39}) (async) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) accept$ax25(r3, 0x0, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x1, 0x5, 0x2, 0x0, 0x8, 0x5, 0xa1}) (async) 21:43:05 executing program 5: socketpair(0x23, 0x6, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "b951c3424d104aad", "2884b8a1560c5b63ed2c815959dc5e97", "bf190f7d", "ac5c930459b952fd"}, 0x28) socketpair(0x1f, 0x80000, 0x6, &(0x7f0000000100)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/165, 0xa5, 0x1, &(0x7f0000000200)=""/115, 0x73}, &(0x7f00000001c0)=0x40) 21:43:05 executing program 2: socketpair(0x3, 0x5, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x5, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000080)) (async) 21:43:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0xab, &(0x7f0000000000)="cfb82c97b88e5f8a49af141f83b50b063817474b69ae81e48ffaacc10e7439a11d283d4e1463aa47d65e7d9db02be1c6e5893a25333a5acb50d2d02276aec744d56a687073b00e0f9e6aec96a6a46e111b077f880fa2c18fd6a30e07aa5475d14524af1e48d7e63a0d9f42f423c889eb9c68b10f9b66faf9e977a20a5e179bd25766b490478584c9bdeffa118219462b89bb5aef0f590d900637399f1202b422abb73bf1aa9c4a17fcb293"}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0xab, &(0x7f0000000000)="cfb82c97b88e5f8a49af141f83b50b063817474b69ae81e48ffaacc10e7439a11d283d4e1463aa47d65e7d9db02be1c6e5893a25333a5acb50d2d02276aec744d56a687073b00e0f9e6aec96a6a46e111b077f880fa2c18fd6a30e07aa5475d14524af1e48d7e63a0d9f42f423c889eb9c68b10f9b66faf9e977a20a5e179bd25766b490478584c9bdeffa118219462b89bb5aef0f590d900637399f1202b422abb73bf1aa9c4a17fcb293"}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:05 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = accept4$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom, @null, @netrom, @bcast, @remote, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept4$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@remote, @bcast, @default, @bcast, @null, @null, @null, @netrom]}, &(0x7f0000000180)=0x48, 0x800) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:05 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r2, 0x39}) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000040), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r3, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x1, 0x5, 0x2, 0x0, 0x8, 0x5, 0xa1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r2, 0x39}) (async) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) accept$ax25(r3, 0x0, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x1, 0x5, 0x2, 0x0, 0x8, 0x5, 0xa1}) (async) [ 1424.879828] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 1424.887470] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1424.954012] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1424.968123] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de 21:43:05 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) socketpair(0xb, 0x3, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r3 = syz_mount_image$pvfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x4, &(0x7f0000000b00)=[{&(0x7f00000006c0)="8f5cb5d4ee849caf903feee5fc307ccb20686bcb535ba034f7b6fb364eeaf9d18999b238618daed734f336866876e6057fd288da1d36625b52e7a39c59be135d089a6bbb37eccfbda1624bb3fde973b43f901b431166c1202552d46507ca1e5388", 0x61, 0x101}, {&(0x7f0000000780)="c0f8acec24e350b9c635d207d8745bb40ee91f0bf974a1601d4e3d8f332806382995cd1c74498b009adc8e74e8234cac7e6d6c4e4d623f671ac94c76ec3c91c459ca3c51bb5489f7a0f7a1c005814338f846f48552e3fc97e6c040a50b005a294b7636c9d2eef641d3f808e4", 0x6c, 0x8}, {0x0}, {0x0, 0x0, 0x4}], 0x40000, &(0x7f0000000b80)={[{'-'}, {'syzkaller\x00'}, {'\x00'}, {'*%:('}, {'z/$/^&)'}, {'syzkaller\x00'}, {'syzkaller\x00'}, {'(D!#*'}, {'\x00'}, {'$\'%,.'}], [{@fowner_gt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x37, 0x30, 0x39, 0x1d, 0x35, 0x64], 0x2d, [0x5a, 0x32, 0x62, 0x33], 0x2d, [0x63, 0x33, 0x66, 0x61], 0x2d, [0x65, 0x35, 0x30, 0x66], 0x2d, [0x39, 0x38, 0x66, 0x37, 0x61, 0x36, 0x36, 0x35]}}}, {@obj_type={'obj_type', 0x3d, '^:'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) getdents64(r3, &(0x7f0000000c80)=""/236, 0xec) (async) readlinkat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/111, 0x6f) 21:43:05 executing program 2: socketpair(0x3, 0x5, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000080)) 21:43:05 executing program 5: socketpair(0x23, 0x6, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "b951c3424d104aad", "2884b8a1560c5b63ed2c815959dc5e97", "bf190f7d", "ac5c930459b952fd"}, 0x28) (async) socketpair(0x1f, 0x80000, 0x6, &(0x7f0000000100)) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/165, 0xa5, 0x1, &(0x7f0000000200)=""/115, 0x73}, &(0x7f00000001c0)=0x40) 21:43:05 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = accept4$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom, @null, @netrom, @bcast, @remote, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept4$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@remote, @bcast, @default, @bcast, @null, @null, @null, @netrom]}, &(0x7f0000000180)=0x48, 0x800) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/74) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:05 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@null, @null, 0x6, [@default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) 21:43:05 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@null, @null, 0x6, [@default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@null, @null, 0x6, [@default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) [ 1425.052654] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1425.058701] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de 21:43:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/74) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/74) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:43:06 executing program 5: socketpair(0x23, 0x6, 0x2, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "b951c3424d104aad", "2884b8a1560c5b63ed2c815959dc5e97", "bf190f7d", "ac5c930459b952fd"}, 0x28) socketpair(0x1f, 0x80000, 0x6, &(0x7f0000000100)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/165, 0xa5, 0x1, &(0x7f0000000200)=""/115, 0x73}, &(0x7f00000001c0)=0x40) 21:43:06 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom, @null, @netrom, @bcast, @remote, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/252, &(0x7f0000000100)=0xfc) socketpair(0xf, 0x3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4) 21:43:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) [ 1425.146721] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1425.178805] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 1425.207562] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:06 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x1, 0x1, 0xfffffffe, 0x8}) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000240)={0x2, 0x1, 0xffffff7f, 0x8000000, 0x8, 0x8000, 0xb48, 0xfffff000, 0x6}) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/233, 0xe9) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0xb42, 0x10}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) 21:43:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/74) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:06 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom, @null, @netrom, @bcast, @remote, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/252, &(0x7f0000000100)=0xfc) (async, rerun: 64) socketpair(0xf, 0x3, 0x0, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4) 21:43:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) (async) 21:43:06 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@null, @null, 0x6, [@default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@null, @null, 0x6, [@default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) 21:43:06 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom, @null, @netrom, @bcast, @remote, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x408240) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/252, &(0x7f0000000100)=0xfc) (async) socketpair(0xf, 0x3, 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4) 21:43:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) (async) 21:43:06 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom, @null, @netrom, @bcast, @remote, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:06 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) connect$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) [ 1425.952117] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1425.974436] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1426.032842] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:07 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x1, 0x1, 0xfffffffe, 0x8}) (async) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000240)={0x2, 0x1, 0xffffff7f, 0x8000000, 0x8, 0x8000, 0xb48, 0xfffff000, 0x6}) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/233, 0xe9) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0xb42, 0x10}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) 21:43:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x408240) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x80000000000]}) 21:43:07 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom, @null, @netrom, @bcast, @remote, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:07 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f00000000c0)=0x14) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:43:07 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) connect$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 21:43:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x80000000000]}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x80000000000]}) (async) 21:43:07 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:07 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f00000000c0)=0x14) (async) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:43:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x408240) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) [ 1426.814735] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:07 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:07 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) connect$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) connect$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) [ 1426.936250] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1426.948928] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:08 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x1, 0x1, 0xfffffffe, 0x8}) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000240)={0x2, 0x1, 0xffffff7f, 0x8000000, 0x8, 0x8000, 0xb48, 0xfffff000, 0x6}) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/233, 0xe9) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0xb42, 0x10}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x1, 0x1, 0xfffffffe, 0x8}) (async) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000240)={0x2, 0x1, 0xffffff7f, 0x8000000, 0x8, 0x8000, 0xb48, 0xfffff000, 0x6}) (async) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/233, 0xe9) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0xb42, 0x10}, 0xc) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) (async) 21:43:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x80000000000]}) 21:43:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 21:43:08 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f00000000c0)=0x14) (async) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:43:08 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x800}, 0x8) 21:43:08 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:08 executing program 2: ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000001140)=""/144) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x145500) r1 = syz_open_dev$dri(&(0x7f0000001100), 0x200, 0x4c80) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/4096}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, [0x89, 0xffff], [0xffffffff, 0xfffffffe, 0x0, 0xffffffff], [0x10000, 0x0, 0x40000000]}) 21:43:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 21:43:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) (async, rerun: 32) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (rerun: 32) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x800}, 0x8) 21:43:08 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:08 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 21:43:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 21:43:08 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:08 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f0000000200)=""/210, 0xd2}], 0x2}, 0x40000022) 21:43:08 executing program 2: ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000001140)=""/144) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x145500) (async) r1 = syz_open_dev$dri(&(0x7f0000001100), 0x200, 0x4c80) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/4096}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, [0x89, 0xffff], [0xffffffff, 0xfffffffe, 0x0, 0xffffffff], [0x10000, 0x0, 0x40000000]}) 21:43:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x800}, 0x8) 21:43:08 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 21:43:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffff7ff, 0x2c440) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x400, 0x6, 0x3, 0x4, 0xb2], 0x3}) r1 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) 21:43:08 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:08 executing program 2: ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000001140)=""/144) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x145500) r1 = syz_open_dev$dri(&(0x7f0000001100), 0x200, 0x4c80) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/4096}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, [0x89, 0xffff], [0xffffffff, 0xfffffffe, 0x0, 0xffffffff], [0x10000, 0x0, 0x40000000]}) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000001140)=""/144) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x145500) (async) syz_open_dev$dri(&(0x7f0000001100), 0x200, 0x4c80) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/4096}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, [0x89, 0xffff], [0xffffffff, 0xfffffffe, 0x0, 0xffffffff], [0x10000, 0x0, 0x40000000]}) (async) 21:43:08 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 21:43:08 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 21:43:08 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000240)=0x101, 0x4) 21:43:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffff7ff, 0x2c440) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x400, 0x6, 0x3, 0x4, 0xb2], 0x3}) (async) r1 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) 21:43:08 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "24053f87df2c575f", "1c5baabc98447e4f52ae0bb71b0f7888", "7129a5b3", "7bd6c5b363afc28e"}, 0x28) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="10002dbd7000fddbdf25070000000c000600030000000000000008000100030000000a0004007770616e3100000008000300", @ANYRES32=0x0, @ANYBLOB="ebff16000000000000000000391d890a0004007770616e300000002e643584c6185f4af83c417990215d9f6a4ead31fd4372f02fb88587d023d404e782ff3a7e5c932ec45d8ab523ec38e0cca91d3f200962a7b2b5d2a61d1271aba4d5947fc504c0b4381703f094f468596346e62726a885f3bf2f80061810addd04c4593e0337b9b4975c026b60dd80a120b5630f954eb3ad71a663fa3a90470e1f601f360fe96d21c0f9ad8e700c213034e20796ba5bcdb8b613c6ac101deaf0f13ca3d59b223789a5e2a4d892f8f14bc9ed70c38dcba6231d7f72ad5b5b19d7ecce054e400855cf605adbc8a14f402d7cb1d9ec8e5ac30995c2bf3552c6882f0cd6dd369777476e5dcdc0e1ae145400"/280], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x24008050) [ 1428.024000] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:09 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f0000000200)=""/210, 0xd2}], 0x2}, 0x40000022) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f0000000200)=""/210, 0xd2}], 0x2}, 0x40000022) (async) 21:43:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x410241) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x8, 0xfffffffd, 0x0, 0x8, 0x0, [0x0, 0x0, 0x2], [0x0, 0x7], [], [0x0, 0xe01]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0xff, 0x81, 0x4}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1057eb31a6a3d74f510db1134ea2e7f9e1b7d7b7496dcb4d88bf199a503126a733ba0c838da12379d6857cecc7", 0x2d}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000340)) r5 = syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffa, 0x4800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r5}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000280)={r8}) 21:43:09 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async, rerun: 64) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (rerun: 64) 21:43:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffff7ff, 0x2c440) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x400, 0x6, 0x3, 0x4, 0xb2], 0x3}) r1 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) 21:43:09 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000240)=0x101, 0x4) 21:43:09 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "24053f87df2c575f", "1c5baabc98447e4f52ae0bb71b0f7888", "7129a5b3", "7bd6c5b363afc28e"}, 0x28) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="10002dbd7000fddbdf25070000000c000600030000000000000008000100030000000a0004007770616e3100000008000300", @ANYRES32=0x0, @ANYBLOB="ebff16000000000000000000391d890a0004007770616e300000002e643584c6185f4af83c417990215d9f6a4ead31fd4372f02fb88587d023d404e782ff3a7e5c932ec45d8ab523ec38e0cca91d3f200962a7b2b5d2a61d1271aba4d5947fc504c0b4381703f094f468596346e62726a885f3bf2f80061810addd04c4593e0337b9b4975c026b60dd80a120b5630f954eb3ad71a663fa3a90470e1f601f360fe96d21c0f9ad8e700c213034e20796ba5bcdb8b613c6ac101deaf0f13ca3d59b223789a5e2a4d892f8f14bc9ed70c38dcba6231d7f72ad5b5b19d7ecce054e400855cf605adbc8a14f402d7cb1d9ec8e5ac30995c2bf3552c6882f0cd6dd369777476e5dcdc0e1ae145400"/280], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x24008050) 21:43:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x410241) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x8, 0xfffffffd, 0x0, 0x8, 0x0, [0x0, 0x0, 0x2], [0x0, 0x7], [], [0x0, 0xe01]}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0xff, 0x81, 0x4}) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1057eb31a6a3d74f510db1134ea2e7f9e1b7d7b7496dcb4d88bf199a503126a733ba0c838da12379d6857cecc7", 0x2d}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000340)) (async) r5 = syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffa, 0x4800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r5}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000280)={r8}) 21:43:09 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000240)=0x101, 0x4) 21:43:09 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "24053f87df2c575f", "1c5baabc98447e4f52ae0bb71b0f7888", "7129a5b3", "7bd6c5b363afc28e"}, 0x28) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="10002dbd7000fddbdf25070000000c000600030000000000000008000100030000000a0004007770616e3100000008000300", @ANYRES32=0x0, @ANYBLOB="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"/280], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x24008050) 21:43:09 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000240)=0x101, 0x4) 21:43:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x410241) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x8, 0xfffffffd, 0x0, 0x8, 0x0, [0x0, 0x0, 0x2], [0x0, 0x7], [], [0x0, 0xe01]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0xff, 0x81, 0x4}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1057eb31a6a3d74f510db1134ea2e7f9e1b7d7b7496dcb4d88bf199a503126a733ba0c838da12379d6857cecc7", 0x2d}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000340)) (async) r5 = syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffa, 0x4800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r5}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000280)={r8}) [ 1428.833833] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:09 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0) [ 1428.875332] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1428.888246] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1428.920916] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1428.949893] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1428.958423] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1428.967174] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1428.976008] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1428.984335] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1428.993439] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.001871] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.010304] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.018726] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.027229] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.035621] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.043948] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.052382] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.060806] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.069216] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.077637] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.086066] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.094400] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.102790] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.111221] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.120110] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.128570] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.136989] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.145437] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.153758] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.162147] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.170557] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.178965] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.187674] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.196083] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.204423] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.212830] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.221236] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.229624] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.238051] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.246947] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.255366] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.263697] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.272095] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.280509] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.288907] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.297314] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.305707] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.314046] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.322453] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.330874] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.339264] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.347687] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.356117] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.364448] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.372855] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.381569] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.389954] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.398465] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.406866] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.415289] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.423624] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.432021] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.440423] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.448814] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1429.457216] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:10 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f0000000200)=""/210, 0xd2}], 0x2}, 0x40000022) 21:43:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0xa00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[r2, 0x0, r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0xfff, 0x8, 0x401], 0x6, 0xa}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000240), 0xc, &(0x7f0000000e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980b0000", @ANYRES16=r6, @ANYBLOB="00042dbd7000ffdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0e020f0037d01f0631de3ef7a885671d3edbdd15e0f888627b2b4c9ca511b6e34785d1042aa394ce906367b78056ba9fa5532daf42441eb5d9ee185cd18029ab84438e0b079f5838e87a3397f078feae1a94f9abab9ac20a011ad84b137d3f8911c0d10dfa179dc25eed855c36ed42e8bb056eb50211a7f939ce9585c84c7da6c08378fd4bff600318fd44df69735891646d2101c27317de3645531e8c3454d5a7011c3b9ccd0d8588708d7dc2bffdd00a0ee65c3ce0b4493ba75cdbc649b802138e62a0a6c5f13e38d4c021089de8a1c417f9d70200760605082e0000002d1a008011ffff0000000000000900fe000b00000001080900000004bdf0ffffffffffff6512ac2d40d2b68b080211000000080211000000840f000100fffffffffffffec600003d0026dd0006a609548229107d925c572861be93564eeaba97835e94e2866081a9a203b9cd08c52b99a4e081d9df0860e7ea82efbbe9273213f9bba18aabd9b89bd273277318811ed9e00af48392a22435f43e57dba0f71bc4792a7f457ef89a6aaff9fa8a3274592857490ecff55608bd3860b631970ac168d61fbe778abc3ffe791829e1278fc92031fbfdc8d505f894eada7520f35ab74a99230d6c24eed35652f5ba73679b0e84c7ae53f4807e2fc704396aa400992ddeb292c37066afb45bd625e8bd199e2bae1d9a0c11f30fe5ed2da4f34529d09a99832d00b903db947e72060303030303030000c8008000651208021100000108021100000008021100000037ae3f045d5e65218f29cd3573c848962ee8800448cb57989c0816c2db1d6e419d140e959b8b87517400cb789e9ed4bbc306ab0046318fa4b9a17b2cf64b88cf91226a95e47715f0af733ba3bb4df09457144883041697d62c0954aaf5c3e4fb73db869ad89019095993f39d020f75d64324cbfe2c61320ecc70d6b48b0207b1329daf7c6ddc0128fd5c83a6c74cc69fe0857d35f6f8baacb1a070cea6cf4b3b964596289f76f5ecb11ef4f440e6aee44b007f002a01048c10ab09d670ef3a029c0b4d1b9352c5c94d250301afd2040600080400ab003c0400f9b0037504000091020005be34e7dedf8c10fe089bb1011d24a3557014789d3c19530010002a000301ae71070100010102004148089100f67387cb14fe5d38a0fe85c61e49b08b57480b15b12dfe2c42dd4790c935a9af5dd50b9da9dcd4c989a82cc3e4f575043dd220e4b9a11014d0f491522d3ed2324370af8ad968e85d7d22f9617e13643ddcddbf521df08b8352b63a6b83bf176e012756ac5203cbb90c2fb1b21f4acc5db0e344d89012821d8f3ce7a148344d40c94f54da28b393133dabd0f1c4b44178d4ec955bc64e9216cc84e6f6980aafcdaa1d373c1d5c7230ed2502e99d412d9ee5345b1b1516bb2f5f85ae5eb9acc1aabb7f5579e0a268e49ac39aa398228c90b341937d055b8e817d4e03cf9a0149c9caaf67e1aac4c69b64171b41146f4d269cb6332a56633b2f55f4837cddeb6024fccda9443deef7c30c91cb630197231764abfe2b3d01ca594bcdca0102f67062bdf5f888838ddf103dee32b741ed64a70ce07cd3ea707bb54f06dd23bc9ea227a4aea0c6b305dca759661c30c8232b83513864f070874ca7e5cb271831e2dbe328c092ee88742d7136f9a5faf43ec1363005ad2514f69ea18f7d1eecb4bcec90f9cdee91f4236447e6dc31bccf7bdd9011a196f8511f8201b0c804fa98e8f2f289096f79d5569163630963b1c7dd3b3c8ad3423a4ed38c0d646ddad66ba120bd77d31ebd55545abe867ca16ec7dbf72fa13742e77dca12de42c240b8b628767411cb8e9945c38f755f5c233361f869c9ecf73727c85460789c823cbed0de99be7c0dcaabc8927d8e4f0ff48ec15cb194f2a71c28418da44347bf797ab4ee8f17ba4d5945703b9a700efacc0ba4b1e71931c873b3f974fc33478490c57ecdb28ac02ddd4c1b7cb513303f320c153f8ac4316d76b97a53466f465b35a58770b122f6d80379eecdc0eda56b924661e26d322b34d6431b86a16f4f7d8a6e309eee1f0c3ca35702e9c02749bc4002e22ac12a631ab1a8320437353b782f5efba2ae2100c12b6f603a7d0023a929820efd26ced0485c8c6960dae4199e74e670df4c3c64e080953e1a8c993d151ffa2038ffd0a0bcacafcfd771eafb6e1eeaa2141bc07ff5116a9a10dd4f8a12b4046df7a04a61a62754e8d8d95bf94553bb3e10c613e7233355843a844e9d9f6bda00fe7d7ef3d828e0c284c2dd13fd6dad3a83066d144820fdcbaa723e07e262129d417f42584eca5ea0ffbc17be12c9670ced7ab2c898aa1e77c00f614b62c6a434ccf44f40f45734b056ab0a07b3bb10f876648791dbb1b4a87216530011bf363caa8815cef504417bb8260cba706c953cd2442b2823bc59d1fb96df5d8134cc5c9445fa00880f8dc77e9f0f2e27e0fca1845165d803e065ad0fab919b58a9f8822725ff5965b19bf7ade162cb4bc25b64e9e04f8e6236e40196d110ddbe98692532157c421106958cdcbb1c165b02d4b60dc8f99d8f4ea1d3341f58c72c2bee6580a42d6215ee638a1c118e178e0d4ced5fea2954d01ffcab793b3c655cf71a99794d50e62a5d82291148e8bb7875d67c21bbf55211957d341c434959b56c358932b3a8a4572f9ec7dd88b401479a183a13b5900ee7e710222f741b74e2452b6075b766a900c07272d838ace388219783cd8a715c0b9f20c62de5fa19fc417d6caa0b572ead04f3414cb65e127a8c7325cbc14262273a757c15283506877b114624ec76f49bd6b6cecd2fdd63ed47b39a0f1f0628ded52b097c91cf4e6034f63c2b4883d24ebd5bb8f47ff2ecd1fe306833491cd85cdea068b79b87cd5e91243dd21c0b8365a6526ba205208d672dc907145222b8e568087e4c0405d9575ee4fe77372c144f3781a50b695ad0f68b269013a2a5ef8d854f9d071c353741111b4a132eba72b15d895d855d55dada4368fae5b6b13166c09b9cb5aa85feda72950e7cf15bb1fec16555a6073eb7779f0e49a5f2329eb5c1caaea52c12c7b54c070fdb5e1737353bcfe8fb8b6e60c79e833c26889f8add5645acf726d64b4f622295004c7e4985eb62a4890bf9f886aa7b0073171f9f4fabcf9db48abd40748c29b4a50e1a902d86db74382ce748d0ee87ffc1d6b50f9eb94e77dd2e7a402a927b7f8e5e60fa80128681b586998309712d6ca0b3da5e840265cece477f04ab083bdbf0491711dc9e5a588fc456f73af3cef682fe442f40be774d018163a2c2348a5d4c0e52aac87230871d5b322cba5300694fdd1030f4b4e590519c05b37aee0d4db513fb0aa1287dfd7f69e880fa9d76052a62bd1da9965f202e953a147343689a1061f8c237fb4c7857d2c1e101ae29a2d7758feaffa0949974ffce6be265058feed354488d194be7c03344a1d5023967fa04b3e85731e7482438f1ca58e237fd89776fc9e85f7f56f4dfe24ec126df4351f59e90de02207ee7d264ae64bb33adb41cbb76cfed73ac25698c05db8cc73d6a361c01783ea80be853a0c98efc4efdb62880b5d0102b27af8a120361c115490affbb6b9aa0d9b466b0a095c587ded777f8e187627744b2852d5afa901e2e079c33ac3f4c521a6f81c5cbdd724b3af3e2f9f2df06f78c447ddee551e975ce997d53373080f37cac18edaa9361b0902bb2d2b05fed506cda104488d7b1aa574197d2ec58e841913598063746111eda492136e622c3fb0101254f22a2413c4b7ced321add2b407a987c5dac1840e5ada1da038ade2280469f03cfd0c4f609f5193193c3e2cddcb65304f56b86b2f04c4d95b5776445e08e6ca67913cb0ec0dc1cb33aa8d68984fc35017adebcc156355b34ada79d514358c786268adc4e7305d9a0e6ba71389a9b18d938314151e29ca29c816e523d4826a49656b467671138758655b25e0c15bd234d86d661668357169688494057fc4562bf5fa8273f418751ee979731333214f93d426dce87bad3d415b7c3d9c527c6539c690d9bccf94afbca97089099556e6a73f71e0fe465f55df8dd4db74306743133b271b3048e1d31de8c313462531f3b21904834e0ec85478aafe3c8f6439a21f9eefd713ae0145d47656627e03b49"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f00000001c0)={0x0, 0x2}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:10 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:10 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0) 21:43:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) 21:43:10 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 21:43:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0xa00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[r2, 0x0, r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0xfff, 0x8, 0x401], 0x6, 0xa}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000240), 0xc, &(0x7f0000000e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980b0000", @ANYRES16=r6, @ANYBLOB="00042dbd7000ffdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f00000001c0)={0x0, 0x2}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0xa00) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[r2, 0x0, r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0xfff, 0x8, 0x401], 0x6, 0xa}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) (async) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000240), 0xc, &(0x7f0000000e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980b0000", @ANYRES16=r6, @ANYBLOB="00042dbd7000ffdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0e020f0037d01f0631de3ef7a885671d3edbdd15e0f888627b2b4c9ca511b6e34785d1042aa394ce906367b78056ba9fa5532daf42441eb5d9ee185cd18029ab84438e0b079f5838e87a3397f078feae1a94f9abab9ac20a011ad84b137d3f8911c0d10dfa179dc25eed855c36ed42e8bb056eb50211a7f939ce9585c84c7da6c08378fd4bff600318fd44df69735891646d2101c27317de3645531e8c3454d5a7011c3b9ccd0d8588708d7dc2bffdd00a0ee65c3ce0b4493ba75cdbc649b802138e62a0a6c5f13e38d4c021089de8a1c417f9d70200760605082e0000002d1a008011ffff0000000000000900fe000b00000001080900000004bdf0ffffffffffff6512ac2d40d2b68b080211000000080211000000840f000100fffffffffffffec600003d0026dd0006a609548229107d925c572861be93564eeaba97835e94e2866081a9a203b9cd08c52b99a4e081d9df0860e7ea82efbbe9273213f9bba18aabd9b89bd273277318811ed9e00af48392a22435f43e57dba0f71bc4792a7f457ef89a6aaff9fa8a3274592857490ecff55608bd3860b631970ac168d61fbe778abc3ffe791829e1278fc92031fbfdc8d505f894eada7520f35ab74a99230d6c24eed35652f5ba73679b0e84c7ae53f4807e2fc704396aa400992ddeb292c37066afb45bd625e8bd199e2bae1d9a0c11f30fe5ed2da4f34529d09a99832d00b903db947e72060303030303030000c8008000651208021100000108021100000008021100000037ae3f045d5e65218f29cd3573c848962ee8800448cb57989c0816c2db1d6e419d140e959b8b87517400cb789e9ed4bbc306ab0046318fa4b9a17b2cf64b88cf91226a95e47715f0af733ba3bb4df09457144883041697d62c0954aaf5c3e4fb73db869ad89019095993f39d020f75d64324cbfe2c61320ecc70d6b48b0207b1329daf7c6ddc0128fd5c83a6c74cc69fe0857d35f6f8baacb1a070cea6cf4b3b964596289f76f5ecb11ef4f440e6aee44b007f002a01048c10ab09d670ef3a029c0b4d1b9352c5c94d250301afd2040600080400ab003c0400f9b0037504000091020005be34e7dedf8c10fe089bb1011d24a3557014789d3c19530010002a000301ae71070100010102004148089100f67387cb14fe5d38a0fe85c61e49b08b57480b15b12dfe2c42dd4790c935a9af5dd50b9da9dcd4c989a82cc3e4f575043dd220e4b9a11014d0f491522d3ed2324370af8ad968e85d7d22f9617e13643ddcddbf521df08b8352b63a6b83bf176e012756ac5203cbb90c2fb1b21f4acc5db0e344d89012821d8f3ce7a148344d40c94f54da28b393133dabd0f1c4b44178d4ec955bc64e9216cc84e6f6980aafcdaa1d373c1d5c7230ed2502e99d412d9ee5345b1b1516bb2f5f85ae5eb9acc1aabb7f5579e0a268e49ac39aa398228c90b341937d055b8e817d4e03cf9a0149c9caaf67e1aac4c69b64171b41146f4d269cb6332a56633b2f55f4837cddeb6024fccda9443deef7c30c91cb630197231764abfe2b3d01ca594bcdca0102f67062bdf5f888838ddf103dee32b741ed64a70ce07cd3ea707bb54f06dd23bc9ea227a4aea0c6b305dca759661c30c8232b83513864f070874ca7e5cb271831e2dbe328c092ee88742d7136f9a5faf43ec1363005ad2514f69ea18f7d1eecb4bcec90f9cdee91f4236447e6dc31bccf7bdd9011a196f8511f8201b0c804fa98e8f2f289096f79d5569163630963b1c7dd3b3c8ad3423a4ed38c0d646ddad66ba120bd77d31ebd55545abe867ca16ec7dbf72fa13742e77dca12de42c240b8b628767411cb8e9945c38f755f5c233361f869c9ecf73727c85460789c823cbed0de99be7c0dcaabc8927d8e4f0ff48ec15cb194f2a71c28418da44347bf797ab4ee8f17ba4d5945703b9a700efacc0ba4b1e71931c873b3f974fc33478490c57ecdb28ac02ddd4c1b7cb513303f320c153f8ac4316d76b97a53466f465b35a58770b122f6d80379eecdc0eda56b924661e26d322b34d6431b86a16f4f7d8a6e309eee1f0c3ca35702e9c02749bc4002e22ac12a631ab1a8320437353b782f5efba2ae2100c12b6f603a7d0023a929820efd26ced0485c8c6960dae4199e74e670df4c3c64e080953e1a8c993d151ffa2038ffd0a0bcacafcfd771eafb6e1eeaa2141bc07ff5116a9a10dd4f8a12b4046df7a04a61a62754e8d8d95bf94553bb3e10c613e7233355843a844e9d9f6bda00fe7d7ef3d828e0c284c2dd13fd6dad3a83066d144820fdcbaa723e07e262129d417f42584eca5ea0ffbc17be12c9670ced7ab2c898aa1e77c00f614b62c6a434ccf44f40f45734b056ab0a07b3bb10f876648791dbb1b4a87216530011bf363caa8815cef504417bb8260cba706c953cd2442b2823bc59d1fb96df5d8134cc5c9445fa00880f8dc77e9f0f2e27e0fca1845165d803e065ad0fab919b58a9f8822725ff5965b19bf7ade162cb4bc25b64e9e04f8e6236e40196d110ddbe98692532157c421106958cdcbb1c165b02d4b60dc8f99d8f4ea1d3341f58c72c2bee6580a42d6215ee638a1c118e178e0d4ced5fea2954d01ffcab793b3c655cf71a99794d50e62a5d82291148e8bb7875d67c21bbf55211957d341c434959b56c358932b3a8a4572f9ec7dd88b401479a183a13b5900ee7e710222f741b74e2452b6075b766a900c07272d838ace388219783cd8a715c0b9f20c62de5fa19fc417d6caa0b572ead04f3414cb65e127a8c7325cbc14262273a757c15283506877b114624ec76f49bd6b6cecd2fdd63ed47b39a0f1f0628ded52b097c91cf4e6034f63c2b4883d24ebd5bb8f47ff2ecd1fe306833491cd85cdea068b79b87cd5e91243dd21c0b8365a6526ba205208d672dc907145222b8e568087e4c0405d9575ee4fe77372c144f3781a50b695ad0f68b269013a2a5ef8d854f9d071c353741111b4a132eba72b15d895d855d55dada4368fae5b6b13166c09b9cb5aa85feda72950e7cf15bb1fec16555a6073eb7779f0e49a5f2329eb5c1caaea52c12c7b54c070fdb5e1737353bcfe8fb8b6e60c79e833c26889f8add5645acf726d64b4f622295004c7e4985eb62a4890bf9f886aa7b0073171f9f4fabcf9db48abd40748c29b4a50e1a902d86db74382ce748d0ee87ffc1d6b50f9eb94e77dd2e7a402a927b7f8e5e60fa80128681b586998309712d6ca0b3da5e840265cece477f04ab083bdbf0491711dc9e5a588fc456f73af3cef682fe442f40be774d018163a2c2348a5d4c0e52aac87230871d5b322cba5300694fdd1030f4b4e590519c05b37aee0d4db513fb0aa1287dfd7f69e880fa9d76052a62bd1da9965f202e953a147343689a1061f8c237fb4c7857d2c1e101ae29a2d7758feaffa0949974ffce6be265058feed354488d194be7c03344a1d5023967fa04b3e85731e7482438f1ca58e237fd89776fc9e85f7f56f4dfe24ec126df4351f59e90de02207ee7d264ae64bb33adb41cbb76cfed73ac25698c05db8cc73d6a361c01783ea80be853a0c98efc4efdb62880b5d0102b27af8a120361c115490affbb6b9aa0d9b466b0a095c587ded777f8e187627744b2852d5afa901e2e079c33ac3f4c521a6f81c5cbdd724b3af3e2f9f2df06f78c447ddee551e975ce997d53373080f37cac18edaa9361b0902bb2d2b05fed506cda104488d7b1aa574197d2ec58e841913598063746111eda492136e622c3fb0101254f22a2413c4b7ced321add2b407a987c5dac1840e5ada1da038ade2280469f03cfd0c4f609f5193193c3e2cddcb65304f56b86b2f04c4d95b5776445e08e6ca67913cb0ec0dc1cb33aa8d68984fc35017adebcc156355b34ada79d514358c786268adc4e7305d9a0e6ba71389a9b18d938314151e29ca29c816e523d4826a49656b467671138758655b25e0c15bd234d86d661668357169688494057fc4562bf5fa8273f418751ee979731333214f93d426dce87bad3d415b7c3d9c527c6539c690d9bccf94afbca97089099556e6a73f71e0fe465f55df8dd4db74306743133b271b3048e1d31de8c313462531f3b21904834e0ec85478aafe3c8f6439a21f9eefd713ae0145d47656627e03b49"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f00000001c0)={0x0, 0x2}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:43:10 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) (async) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) (async) socketpair(0x27, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) (async) 21:43:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (rerun: 64) 21:43:10 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0) 21:43:10 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c5}, 0x4000004) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) [ 1429.693432] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0xa00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[r2, 0x0, r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0xfff, 0x8, 0x401], 0x6, 0xa}) (async) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000240), 0xc, &(0x7f0000000e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980b0000", @ANYRES16=r6, @ANYBLOB="00042dbd7000ffdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f00000001c0)={0x0, 0x2}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:11 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x10600) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000040)={0x4, 0x87, 0x6, 0x7fff, 0x2, [0x1, 0x5, 0xa047, 0x6], [0x8000, 0xfffffffc, 0x20, 0x2], [0x80000001, 0x1ff, 0x81, 0x1], [0x2, 0xbe, 0x10000, 0x2]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000180)={r3}) 21:43:11 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c5}, 0x4000004) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:43:11 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000240), 0x4) 21:43:11 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) (async) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) (async) socketpair(0x27, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) (async) 21:43:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) 21:43:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000c10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0xf1296c9d, 0x0, '\x00', 0x8}) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) 21:43:11 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x5], [0x0, 0x4], [0x0, 0x3]}) 21:43:11 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 21:43:11 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c5}, 0x4000004) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:43:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000c10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0xf1296c9d, 0x0, '\x00', 0x8}) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000c10) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0xf1296c9d, 0x0, '\x00', 0x8}) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) (async) 21:43:11 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 21:43:12 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x10600) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000040)={0x4, 0x87, 0x6, 0x7fff, 0x2, [0x1, 0x5, 0xa047, 0x6], [0x8000, 0xfffffffc, 0x20, 0x2], [0x80000001, 0x1ff, 0x81, 0x1], [0x2, 0xbe, 0x10000, 0x2]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000180)={r3}) 21:43:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x5], [0x0, 0x4], [0x0, 0x3]}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x5], [0x0, 0x4], [0x0, 0x3]}) (async) 21:43:12 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x1}) 21:43:12 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:12 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) socketpair(0xf, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) 21:43:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000c10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0xf1296c9d, 0x0, '\x00', 0x8}) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000c10) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0xf1296c9d, 0x0, '\x00', 0x8}) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) (async) 21:43:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x5], [0x0, 0x4], [0x0, 0x3]}) 21:43:12 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x1}) 21:43:12 executing program 5: socketpair(0xf, 0x3, 0x3, 0x0) 21:43:12 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:12 executing program 5: socketpair(0xf, 0x3, 0x3, 0x0) 21:43:12 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@null, @rose, @rose, @null, @netrom, @remote, @rose, @null]}, &(0x7f0000000100)=0x48) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) r2 = accept4$ax25(r1, 0x0, &(0x7f0000000140), 0x80800) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000180)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) ioctl$SIOCAX25GETUID(r3, 0x89e0, 0x0) [ 1431.682839] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:13 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x10600) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000040)={0x4, 0x87, 0x6, 0x7fff, 0x2, [0x1, 0x5, 0xa047, 0x6], [0x8000, 0xfffffffc, 0x20, 0x2], [0x80000001, 0x1ff, 0x81, 0x1], [0x2, 0xbe, 0x10000, 0x2]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000180)={r3}) 21:43:13 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x1}) 21:43:13 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x4, 0x6, 0x4, 0x0, 0xfffffd0a}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:43:13 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@null, @rose, @rose, @null, @netrom, @remote, @rose, @null]}, &(0x7f0000000100)=0x48) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) r2 = accept4$ax25(r1, 0x0, &(0x7f0000000140), 0x80800) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000180)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) ioctl$SIOCAX25GETUID(r3, 0x89e0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) accept$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@null, @rose, @rose, @null, @netrom, @remote, @rose, @null]}, &(0x7f0000000100)=0x48) (async) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) (async) accept4$ax25(r1, 0x0, &(0x7f0000000140), 0x80800) (async) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000180)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$SIOCAX25GETUID(r3, 0x89e0, 0x0) (async) 21:43:13 executing program 5: socketpair(0xf, 0x3, 0x3, 0x0) socketpair(0xf, 0x3, 0x3, 0x0) (async) 21:43:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x4, 0x6, 0x4, 0x0, 0xfffffd0a}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x4, 0x6, 0x4, 0x0, 0xfffffd0a}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) 21:43:13 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:13 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:43:13 executing program 0: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000280)=[0x4bf1b362, 0x0, 0xc758, 0x1, 0x401, 0x3], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0xcccccccc}) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/127}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000005c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000600)) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000180)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r2 = accept$ax25(r0, 0x0, &(0x7f0000000400)) r3 = accept$ax25(r0, &(0x7f0000000340)={{}, [@rose, @netrom, @default, @default, @remote, @null, @null, @null]}, &(0x7f00000003c0)=0x48) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000480)={0x0, 0x0, 0xffffffffffffffff}) getpeername$ax25(r2, &(0x7f0000000500)={{0x3, @bcast}, [@netrom, @netrom, @remote, @remote, @null, @netrom, @null, @bcast]}, &(0x7f0000000580)=0x48) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000440)={0x0, 0x2}) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}, 0x48) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) setsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000080)=0x4, 0x4) syz_init_net_socket$ax25(0x3, 0x3, 0xd0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000700)}, 0xfffffd14) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) [ 1432.471901] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:13 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) r1 = accept$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@null, @rose, @rose, @null, @netrom, @remote, @rose, @null]}, &(0x7f0000000100)=0x48) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) (async) r2 = accept4$ax25(r1, 0x0, &(0x7f0000000140), 0x80800) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000180)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) ioctl$SIOCAX25GETUID(r3, 0x89e0, 0x0) 21:43:13 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1432.586788] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1432.630928] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:14 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:43:14 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x4, 0x6, 0x4, 0x0, 0xfffffd0a}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x4, 0x6, 0x4, 0x0, 0xfffffd0a}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) 21:43:14 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$isdn(0x22, 0x3, 0x4) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x5) 21:43:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x7cb65365}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:14 executing program 0: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000280)=[0x4bf1b362, 0x0, 0xc758, 0x1, 0x401, 0x3], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0xcccccccc}) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/127}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000005c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000600)) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000180)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r2 = accept$ax25(r0, 0x0, &(0x7f0000000400)) r3 = accept$ax25(r0, &(0x7f0000000340)={{}, [@rose, @netrom, @default, @default, @remote, @null, @null, @null]}, &(0x7f00000003c0)=0x48) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000480)={0x0, 0x0, 0xffffffffffffffff}) getpeername$ax25(r2, &(0x7f0000000500)={{0x3, @bcast}, [@netrom, @netrom, @remote, @remote, @null, @netrom, @null, @bcast]}, &(0x7f0000000580)=0x48) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000440)={0x0, 0x2}) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}, 0x48) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) setsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000080)=0x4, 0x4) syz_init_net_socket$ax25(0x3, 0x3, 0xd0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000700)}, 0xfffffd14) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000280)=[0x4bf1b362, 0x0, 0xc758, 0x1, 0x401, 0x3], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0xcccccccc}) (async) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/127}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000005c0)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000600)) (async) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000180)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) accept$ax25(r0, 0x0, &(0x7f0000000400)) (async) accept$ax25(r0, &(0x7f0000000340)={{}, [@rose, @netrom, @default, @default, @remote, @null, @null, @null]}, &(0x7f00000003c0)=0x48) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000480)) (async) getpeername$ax25(r2, &(0x7f0000000500)={{0x3, @bcast}, [@netrom, @netrom, @remote, @remote, @null, @netrom, @null, @bcast]}, &(0x7f0000000580)=0x48) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000440)={0x0, 0x2}) (async) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}, 0x48) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) (async) setsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000080)=0x4, 0x4) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xd0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000700)}, 0xfffffd14) (async) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) (async) 21:43:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffff1db]}) 21:43:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x7cb65365}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:14 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1433.381076] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:14 executing program 0: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000280)=[0x4bf1b362, 0x0, 0xc758, 0x1, 0x401, 0x3], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0xcccccccc}) (async) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/127}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000005c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000600)) (async) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000180)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r2 = accept$ax25(r0, 0x0, &(0x7f0000000400)) r3 = accept$ax25(r0, &(0x7f0000000340)={{}, [@rose, @netrom, @default, @default, @remote, @null, @null, @null]}, &(0x7f00000003c0)=0x48) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000480)={0x0, 0x0, 0xffffffffffffffff}) getpeername$ax25(r2, &(0x7f0000000500)={{0x3, @bcast}, [@netrom, @netrom, @remote, @remote, @null, @netrom, @null, @bcast]}, &(0x7f0000000580)=0x48) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000440)={0x0, 0x2}) (async) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}, 0x48) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) (async) setsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000080)=0x4, 0x4) syz_init_net_socket$ax25(0x3, 0x3, 0xd0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000700)}, 0xfffffd14) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 21:43:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffff1db]}) 21:43:14 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socketpair(0xf, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) 21:43:14 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1433.550368] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:43:15 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$isdn(0x22, 0x3, 0x4) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x5) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) socket$isdn(0x22, 0x3, 0x4) (async) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x5) (async) 21:43:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x7cb65365}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffff1db]}) 21:43:15 executing program 1: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:15 executing program 0: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0xff0}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x6, 0x0, 0x10c4, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5}, 0x48) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x1, 0x1, 0x3, 0x1, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xa, 0x3, 0x6, 0xffffffffffffffc0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x0, 0x1, 0x2, 0x0, 0xfffffffffffffff0}, @map_fd={0x18, 0x3}]}, &(0x7f0000000100)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0x1, r4, r5, r6, r7, 0x1, 0xffffffffffffffff]}, 0x80) 21:43:15 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044881}, 0x4000) 21:43:15 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) 21:43:15 executing program 1: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:15 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044881}, 0x4000) 21:43:15 executing program 0: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0xff0}, 0xc) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x6, 0x0, 0x10c4, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5}, 0x48) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x1, 0x1, 0x3, 0x1, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xa, 0x3, 0x6, 0xffffffffffffffc0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x0, 0x1, 0x2, 0x0, 0xfffffffffffffff0}, @map_fd={0x18, 0x3}]}, &(0x7f0000000100)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0x1, r4, r5, r6, r7, 0x1, 0xffffffffffffffff]}, 0x80) 21:43:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xff, 0x40003) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={0x1, 0x1000, &(0x7f0000000100)=""/4096}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:43:15 executing program 1: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1434.401180] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1434.427165] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:16 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async, rerun: 32) r1 = socket$isdn(0x22, 0x3, 0x4) (rerun: 32) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x5) 21:43:16 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044881}, 0x4000) 21:43:16 executing program 0: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0xff0}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x6, 0x0, 0x10c4, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5}, 0x48) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x1, 0x1, 0x3, 0x1, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xa, 0x3, 0x6, 0xffffffffffffffc0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x0, 0x1, 0x2, 0x0, 0xfffffffffffffff0}, @map_fd={0x18, 0x3}]}, &(0x7f0000000100)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0x1, r4, r5, r6, r7, 0x1, 0xffffffffffffffff]}, 0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0xff0}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x6, 0x0, 0x10c4, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x8}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x1, 0x1, 0x3, 0x1, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xa, 0x3, 0x6, 0xffffffffffffffc0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x0, 0x1, 0x2, 0x0, 0xfffffffffffffff0}, @map_fd={0x18, 0x3}]}, &(0x7f0000000100)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0x1, r4, r5, r6, r7, 0x1, 0xffffffffffffffff]}, 0x80) (async) 21:43:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xff, 0x40003) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={0x1, 0x1000, &(0x7f0000000100)=""/4096}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0xff, 0x40003) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={0x1, 0x1000, &(0x7f0000000100)=""/4096}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) 21:43:16 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) 21:43:16 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:16 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) socketpair(0x23, 0x1, 0x7, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000100)={0x7160000, 0x8, 0xf0c, 0x1, 0x0, [0x7ff, 0x75ef3fad, 0x5, 0x2], [0x1, 0x7fff, 0x7e, 0x6], [0x0, 0x7, 0x7f], [0x40, 0x4, 0x1]}) 21:43:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xff, 0x40003) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={0x1, 0x1000, &(0x7f0000000100)=""/4096}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:43:16 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:16 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) socketpair(0x23, 0x1, 0x7, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000100)={0x7160000, 0x8, 0xf0c, 0x1, 0x0, [0x7ff, 0x75ef3fad, 0x5, 0x2], [0x1, 0x7fff, 0x7e, 0x6], [0x0, 0x7, 0x7f], [0x40, 0x4, 0x1]}) 21:43:16 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x4, 0x0, 0x4, 0x800, 0x7, {0x0, 0xea60}, {0x3, 0x0, 0x9, 0x5, 0x2, 0x0, "bcd47007"}, 0x4, 0x1, {&(0x7f0000000080)=[{0x6f96, 0x219f1e15, {0xfffffffffffff800}, 0x10000}, {0x2, 0x1ff, {0x7f}, 0x8}]}, 0x6}) 21:43:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x10, 0x0, 0x0, 0x0, [0x2849], [], [], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000140), &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140), 0x2, 0x0, 0x3}) [ 1435.268037] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1435.283194] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:16 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:16 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0) (async) 21:43:16 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x4, 0x0, 0x4, 0x800, 0x7, {0x0, 0xea60}, {0x3, 0x0, 0x9, 0x5, 0x2, 0x0, "bcd47007"}, 0x4, 0x1, {&(0x7f0000000080)=[{0x6f96, 0x219f1e15, {0xfffffffffffff800}, 0x10000}, {0x2, 0x1ff, {0x7f}, 0x8}]}, 0x6}) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x4, 0x0, 0x4, 0x800, 0x7, {0x0, 0xea60}, {0x3, 0x0, 0x9, 0x5, 0x2, 0x0, "bcd47007"}, 0x4, 0x1, {&(0x7f0000000080)=[{0x6f96, 0x219f1e15, {0xfffffffffffff800}, 0x10000}, {0x2, 0x1ff, {0x7f}, 0x8}]}, 0x6}) (async) 21:43:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x10, 0x0, 0x0, 0x0, [0x2849], [], [], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000140), &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140), 0x2, 0x0, 0x3}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x10, 0x0, 0x0, 0x0, [0x2849], [], [], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000140), &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140), 0x2, 0x0, 0x3}) (async) 21:43:16 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) socketpair(0x23, 0x1, 0x7, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000100)={0x7160000, 0x8, 0xf0c, 0x1, 0x0, [0x7ff, 0x75ef3fad, 0x5, 0x2], [0x1, 0x7fff, 0x7e, 0x6], [0x0, 0x7, 0x7f], [0x40, 0x4, 0x1]}) 21:43:16 executing program 4: socket$kcm(0x29, 0x2, 0x0) accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @default, @null, @remote, @null, @default, @remote, @netrom]}, &(0x7f0000000080)=0x48) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="006051000009bab7aefc349cc40000df2da72920c7867b99b5d7b0d4387381486e384f70c6645dfe72a195af8ad57d4588a53a84133f6e9159026a125ba58fa01b7e7880ecb3ed2ece0210bf19fd000fdd09abcc7afc76e0a4bbe2f72fca41dfe05d928ce453167da8a993400624be709600123090aacaed8dad108c6e0560a3530e53c16ae3a4ae205ee1cc"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x3, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r6}, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x0, &(0x7f0000000fc0)=[0x1, r9]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@generic={0x0, 0x6, 0x2, 0x8, 0x80000000}, @jmp={0x5, 0x1, 0x6, 0x4, 0x5, 0x10, 0x10}]}, &(0x7f00000006c0)='syzkaller\x00', 0x401, 0x42, &(0x7f0000000700)=""/66, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x4, 0x3, 0x3}, 0x10, 0x11fa3, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r10}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000fc0)=[0x1, r13]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3d5a8841}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7d868de1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xe, 0x6, 0x8, 0xffffffffffffff62, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x2, 0x7ff, 0x200}, 0x10, 0x1ffbd, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, r4, r5, 0x1, r9, r13]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:17 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@remote, @null, @netrom, @default, @null, @bcast, @netrom, @netrom]}, &(0x7f00000000c0)=0x48) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x4000) socket$isdn(0x22, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 21:43:17 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x10, 0x0, 0x0, 0x0, [0x2849], [], [], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000140), &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140), 0x2, 0x0, 0x3}) (rerun: 64) 21:43:17 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x4, 0x0, 0x4, 0x800, 0x7, {0x0, 0xea60}, {0x3, 0x0, 0x9, 0x5, 0x2, 0x0, "bcd47007"}, 0x4, 0x1, {&(0x7f0000000080)=[{0x6f96, 0x219f1e15, {0xfffffffffffff800}, 0x10000}, {0x2, 0x1ff, {0x7f}, 0x8}]}, 0x6}) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x4, 0x0, 0x4, 0x800, 0x7, {0x0, 0xea60}, {0x3, 0x0, 0x9, 0x5, 0x2, 0x0, "bcd47007"}, 0x4, 0x1, {&(0x7f0000000080)=[{0x6f96, 0x219f1e15, {0xfffffffffffff800}, 0x10000}, {0x2, 0x1ff, {0x7f}, 0x8}]}, 0x6}) (async) [ 1436.173792] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1436.201597] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1436.212706] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:17 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockname$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@remote, @null, @netrom, @default, @null, @bcast, @netrom, @netrom]}, &(0x7f00000000c0)=0x48) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x4000) (async, rerun: 32) socket$isdn(0x22, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 21:43:17 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1436.235791] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1436.236824] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = geteuid() ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r2}) 21:43:17 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$isdn(0x22, 0x3, 0x4) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x5) 21:43:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x402) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:43:17 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:17 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@remote, @null, @netrom, @default, @null, @bcast, @netrom, @netrom]}, &(0x7f00000000c0)=0x48) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x4000) socket$isdn(0x22, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) socketpair(0xf, 0x3, 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockname$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@remote, @null, @netrom, @default, @null, @bcast, @netrom, @netrom]}, &(0x7f00000000c0)=0x48) (async) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x4000) (async) socket$isdn(0x22, 0x3, 0x10) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async) [ 1436.338692] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1436.433612] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1436.451643] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:17 executing program 4: socket$kcm(0x29, 0x2, 0x0) accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @default, @null, @remote, @null, @default, @remote, @netrom]}, &(0x7f0000000080)=0x48) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="006051000009bab7aefc349cc40000df2da72920c7867b99b5d7b0d4387381486e384f70c6645dfe72a195af8ad57d4588a53a84133f6e9159026a125ba58fa01b7e7880ecb3ed2ece0210bf19fd000fdd09abcc7afc76e0a4bbe2f72fca41dfe05d928ce453167da8a993400624be709600123090aacaed8dad108c6e0560a3530e53c16ae3a4ae205ee1cc"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x3, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r6}, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x0, &(0x7f0000000fc0)=[0x1, r9]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@generic={0x0, 0x6, 0x2, 0x8, 0x80000000}, @jmp={0x5, 0x1, 0x6, 0x4, 0x5, 0x10, 0x10}]}, &(0x7f00000006c0)='syzkaller\x00', 0x401, 0x42, &(0x7f0000000700)=""/66, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x4, 0x3, 0x3}, 0x10, 0x11fa3, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r10}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000fc0)=[0x1, r13]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3d5a8841}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7d868de1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xe, 0x6, 0x8, 0xffffffffffffff62, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x2, 0x7ff, 0x200}, 0x10, 0x1ffbd, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, r4, r5, 0x1, r9, r13]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @default, @null, @remote, @null, @default, @remote, @netrom]}, &(0x7f0000000080)=0x48) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="006051000009bab7aefc349cc40000df2da72920c7867b99b5d7b0d4387381486e384f70c6645dfe72a195af8ad57d4588a53a84133f6e9159026a125ba58fa01b7e7880ecb3ed2ece0210bf19fd000fdd09abcc7afc76e0a4bbe2f72fca41dfe05d928ce453167da8a993400624be709600123090aacaed8dad108c6e0560a3530e53c16ae3a4ae205ee1cc"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x3, 0x18}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r6}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x0, &(0x7f0000000fc0)=[0x1, r9]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@generic={0x0, 0x6, 0x2, 0x8, 0x80000000}, @jmp={0x5, 0x1, 0x6, 0x4, 0x5, 0x10, 0x10}]}, &(0x7f00000006c0)='syzkaller\x00', 0x401, 0x42, &(0x7f0000000700)=""/66, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x4, 0x3, 0x3}, 0x10, 0x11fa3, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r10}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000fc0)=[0x1, r13]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3d5a8841}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7d868de1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xe, 0x6, 0x8, 0xffffffffffffff62, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x2, 0x7ff, 0x200}, 0x10, 0x1ffbd, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, r4, r5, 0x1, r9, r13]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:43:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = geteuid() ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r2}) 21:43:17 executing program 1: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x402) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:43:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x44040}, 0x4) socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:43:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x44040}, 0x4) (async) socketpair(0xf, 0x3, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:43:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x402) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x402) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) 21:43:18 executing program 1: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:18 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="38573992a90cb828f0af3ebeadee6d9f0575b96bad3046f6d170b14ef40bc3c62ab4b2b9883784c59bc79b29fd070cd6413afa101644eaba2c7894ad89802225edd14241c0f21d2599465f63746ea073d5085e51f9a4d61526d4c867af5839879c783429feb7f31931fd3c0ce52c992f077985b4c710b38f32efa8006173331afc18cb34df947626133422709e0863169b342e4e3c48fdab5911f91b843ce4d82fbbbf1ca7fb8aabe5a20e678b29641116e2ec1de95246a53d9118924a3f10a9832d3b2e6fb58089a31a539f5b43f8b7b42180a3a77773ca2de020c2ec84c55203da503deab590e44c187d89df28a25d", &(0x7f0000000100)=@udp=r0, 0x4}, 0x20) socketpair(0x27, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = geteuid() ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r2}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) geteuid() (async) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r2}) (async) 21:43:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9]}) 21:43:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x44040}, 0x4) (async) socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:43:18 executing program 4: socket$kcm(0x29, 0x2, 0x0) accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @default, @null, @remote, @null, @default, @remote, @netrom]}, &(0x7f0000000080)=0x48) r0 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (rerun: 64) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="006051000009bab7aefc349cc40000df2da72920c7867b99b5d7b0d4387381486e384f70c6645dfe72a195af8ad57d4588a53a84133f6e9159026a125ba58fa01b7e7880ecb3ed2ece0210bf19fd000fdd09abcc7afc76e0a4bbe2f72fca41dfe05d928ce453167da8a993400624be709600123090aacaed8dad108c6e0560a3530e53c16ae3a4ae205ee1cc"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x3, 0x18}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r6}, 0x4) (async, rerun: 32) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x0, &(0x7f0000000fc0)=[0x1, r9]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@generic={0x0, 0x6, 0x2, 0x8, 0x80000000}, @jmp={0x5, 0x1, 0x6, 0x4, 0x5, 0x10, 0x10}]}, &(0x7f00000006c0)='syzkaller\x00', 0x401, 0x42, &(0x7f0000000700)=""/66, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x4, 0x3, 0x3}, 0x10, 0x11fa3, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r10}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000fc0)=[0x1, r13]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3d5a8841}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7d868de1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xe, 0x6, 0x8, 0xffffffffffffff62, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x2, 0x7ff, 0x200}, 0x10, 0x1ffbd, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, r4, r5, 0x1, r9, r13]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:18 executing program 1: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:18 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eae693a665a0e35c110cb63524d2d76e00", @ANYRES16=0x0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c752eaeb82ea9f8b1007f890c6bda6a1a"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1b}, 0x1, 0x0, 0x0, 0x11}, 0x8000) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40014) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000240)='./file0\x00', r2}, 0x10) 21:43:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9]}) 21:43:18 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000240)=0x101, 0x4) 21:43:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:18 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:18 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eae693a665a0e35c110cb63524d2d76e00", @ANYRES16=0x0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c752eaeb82ea9f8b1007f890c6bda6a1a"], 0x28}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1b}, 0x1, 0x0, 0x0, 0x11}, 0x8000) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40014) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000240)='./file0\x00', r2}, 0x10) 21:43:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:18 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:43:18 executing program 0: ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000001140)=""/144) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x145500) r1 = syz_open_dev$dri(&(0x7f0000001100), 0x200, 0x4c80) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/4096}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, [0x89, 0xffff], [0xffffffff, 0xfffffffe, 0x0, 0xffffffff], [0x10000, 0x0, 0x40000000]}) 21:43:19 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xfffffffffffffd93, 0x99, {0x3f, 0x33}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x408d1) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000000)="4676e6bda5cf2cba8b585223e79bfe235b1e0a201c68e88badf6c98f5b385cdfa4b6d9828e1a3d7807d80388e3e808a286645dd407e074fac0f7ab2da3d71c1f333473c2995d94ba6df497cc9992767b19082c454ac86da1ff8c8d4519eef3a0628f2cdbd3eed6a7726fc94bf1dba5a2f2e815a4b4af6738bead00c8b6b5c8a8f66da2a19997205cbc5fc39f4fa69aaa48de51e23bbadd0cf07dc200b97c2a2768dce460842c6cc23bc2c15aa96b88c157c94de0bcf4969f9e2578ad6807a99662232bc3b717ebc06933bd4e9ef8ad5764c2399fd9d3fcc148897c98932b839688e4ac2da28e2f", &(0x7f0000000100)=""/91, &(0x7f0000000180), &(0x7f00000001c0)="6c1a43e002e2d75c87ce407d1a9d5885a7de89280b33c0f5d55a4fccc1fb26894e317f1c1d2d730c957a94b69db186644b9dea721cc63dd88e356f498f9448b82889c688bbaf60e687fc309ee205d8754b8d1e7f89a39713dda3b8a49e79c1ed7751bec577d2fd391f630e30bafed4978529488b8208fb67f4af420ac00162de38043de987be125a947ec807c0535be5405759f5077edf", 0x6}, 0x38) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0xfffffffffffffd6}, 0x40000020) 21:43:19 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eae693a665a0e35c110cb63524d2d76e00", @ANYRES16=0x0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c752eaeb82ea9f8b1007f890c6bda6a1a"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1b}, 0x1, 0x0, 0x0, 0x11}, 0x8000) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40014) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000240)='./file0\x00', r2}, 0x10) socketpair(0xf, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eae693a665a0e35c110cb63524d2d76e00", @ANYRES16=0x0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c752eaeb82ea9f8b1007f890c6bda6a1a"], 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1b}, 0x1, 0x0, 0x0, 0x11}, 0x8000) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40014) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000240)='./file0\x00', r2}, 0x10) (async) 21:43:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9]}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9]}) (async) 21:43:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x800}, 0x8) 21:43:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) connect$ax25(r1, &(0x7f0000000040)={{0x3, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 21:43:19 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xfffffffffffffd93, 0x99, {0x3f, 0x33}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x408d1) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000000)="4676e6bda5cf2cba8b585223e79bfe235b1e0a201c68e88badf6c98f5b385cdfa4b6d9828e1a3d7807d80388e3e808a286645dd407e074fac0f7ab2da3d71c1f333473c2995d94ba6df497cc9992767b19082c454ac86da1ff8c8d4519eef3a0628f2cdbd3eed6a7726fc94bf1dba5a2f2e815a4b4af6738bead00c8b6b5c8a8f66da2a19997205cbc5fc39f4fa69aaa48de51e23bbadd0cf07dc200b97c2a2768dce460842c6cc23bc2c15aa96b88c157c94de0bcf4969f9e2578ad6807a99662232bc3b717ebc06933bd4e9ef8ad5764c2399fd9d3fcc148897c98932b839688e4ac2da28e2f", &(0x7f0000000100)=""/91, &(0x7f0000000180), &(0x7f00000001c0)="6c1a43e002e2d75c87ce407d1a9d5885a7de89280b33c0f5d55a4fccc1fb26894e317f1c1d2d730c957a94b69db186644b9dea721cc63dd88e356f498f9448b82889c688bbaf60e687fc309ee205d8754b8d1e7f89a39713dda3b8a49e79c1ed7751bec577d2fd391f630e30bafed4978529488b8208fb67f4af420ac00162de38043de987be125a947ec807c0535be5405759f5077edf", 0x6}, 0x38) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0xfffffffffffffd6}, 0x40000020) socket$kcm(0x29, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xfffffffffffffd93, 0x99, {0x3f, 0x33}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x408d1) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000000)="4676e6bda5cf2cba8b585223e79bfe235b1e0a201c68e88badf6c98f5b385cdfa4b6d9828e1a3d7807d80388e3e808a286645dd407e074fac0f7ab2da3d71c1f333473c2995d94ba6df497cc9992767b19082c454ac86da1ff8c8d4519eef3a0628f2cdbd3eed6a7726fc94bf1dba5a2f2e815a4b4af6738bead00c8b6b5c8a8f66da2a19997205cbc5fc39f4fa69aaa48de51e23bbadd0cf07dc200b97c2a2768dce460842c6cc23bc2c15aa96b88c157c94de0bcf4969f9e2578ad6807a99662232bc3b717ebc06933bd4e9ef8ad5764c2399fd9d3fcc148897c98932b839688e4ac2da28e2f", &(0x7f0000000100)=""/91, &(0x7f0000000180), &(0x7f00000001c0)="6c1a43e002e2d75c87ce407d1a9d5885a7de89280b33c0f5d55a4fccc1fb26894e317f1c1d2d730c957a94b69db186644b9dea721cc63dd88e356f498f9448b82889c688bbaf60e687fc309ee205d8754b8d1e7f89a39713dda3b8a49e79c1ed7751bec577d2fd391f630e30bafed4978529488b8208fb67f4af420ac00162de38043de987be125a947ec807c0535be5405759f5077edf", 0x6}, 0x38) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0xfffffffffffffd6}, 0x40000020) (async) 21:43:19 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x0, 0x3f}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x80, 0x1}) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x100) 21:43:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x800}, 0x8) [ 1438.907586] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1438.936617] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) connect$ax25(r1, &(0x7f0000000040)={{0x3, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) connect$ax25(r1, &(0x7f0000000040)={{0x3, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) 21:43:19 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x2000000000000, 0x0) 21:43:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x4040000) 21:43:19 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x0, 0x3f}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x80, 0x1}) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x100) 21:43:19 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x2000000000000, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x2000000000000, 0x0) (async) 21:43:19 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xfffffffffffffd93, 0x99, {0x3f, 0x33}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x408d1) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000000)="4676e6bda5cf2cba8b585223e79bfe235b1e0a201c68e88badf6c98f5b385cdfa4b6d9828e1a3d7807d80388e3e808a286645dd407e074fac0f7ab2da3d71c1f333473c2995d94ba6df497cc9992767b19082c454ac86da1ff8c8d4519eef3a0628f2cdbd3eed6a7726fc94bf1dba5a2f2e815a4b4af6738bead00c8b6b5c8a8f66da2a19997205cbc5fc39f4fa69aaa48de51e23bbadd0cf07dc200b97c2a2768dce460842c6cc23bc2c15aa96b88c157c94de0bcf4969f9e2578ad6807a99662232bc3b717ebc06933bd4e9ef8ad5764c2399fd9d3fcc148897c98932b839688e4ac2da28e2f", &(0x7f0000000100)=""/91, &(0x7f0000000180), &(0x7f00000001c0)="6c1a43e002e2d75c87ce407d1a9d5885a7de89280b33c0f5d55a4fccc1fb26894e317f1c1d2d730c957a94b69db186644b9dea721cc63dd88e356f498f9448b82889c688bbaf60e687fc309ee205d8754b8d1e7f89a39713dda3b8a49e79c1ed7751bec577d2fd391f630e30bafed4978529488b8208fb67f4af420ac00162de38043de987be125a947ec807c0535be5405759f5077edf", 0x6}, 0x38) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0xfffffffffffffd6}, 0x40000020) 21:43:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x4040000) 21:43:19 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x81, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x0, 0x3f}) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x80, 0x1}) (rerun: 64) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x100) 21:43:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x800}, 0x8) [ 1439.066085] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.097820] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:20 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x2000000000000, 0x0) 21:43:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async, rerun: 32) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (rerun: 32) connect$ax25(r1, &(0x7f0000000040)={{0x3, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 21:43:20 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) socketpair(0xf, 0x3, 0x0, 0x0) 21:43:20 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x4040000) 21:43:20 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) [ 1439.142740] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.169368] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) 21:43:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, r1, r2, 0x0], &(0x7f0000000140)=[0xeb, 0x7fff, 0x2, 0x9, 0x7fffffff], 0x2, 0x6, 0x6}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={r4}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)) 21:43:20 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:20 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) socketpair(0xf, 0x3, 0x0, 0x0) 21:43:20 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1439.331513] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.364339] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), 0x4) socket$nl_generic(0x10, 0x3, 0x10) 21:43:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, r1, r2, 0x0], &(0x7f0000000140)=[0xeb, 0x7fff, 0x2, 0x9, 0x7fffffff], 0x2, 0x6, 0x6}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={r4}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, r1, r2, 0x0], &(0x7f0000000140)=[0xeb, 0x7fff, 0x2, 0x9, 0x7fffffff], 0x2, 0x6, 0x6}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={r4}) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)) (async) [ 1439.384502] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.408172] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.423498] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:20 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1439.436381] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.453836] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.486828] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.501481] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.510156] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.518693] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.527525] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.536083] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.544535] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.552901] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.561495] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.569929] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.578898] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.587302] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.595692] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.604027] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.612434] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.620894] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.629278] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.637657] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.646045] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.654439] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.662761] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.671213] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.679601] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:20 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) socketpair(0xf, 0x3, 0x0, 0x0) 21:43:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x28000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001080)={0x0, 0x0, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000001240)={0x564a, 0x1, &(0x7f0000001180)=[0x40], &(0x7f00000011c0)=[0x3, 0x3e1, 0x7fff, 0x9, 0x8], &(0x7f0000001200)=[0x9]}) connect$netlink(r3, &(0x7f0000001140), 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000001280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000001300)={0x0, &(0x7f00000012c0)=""/9}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000001100)={0x4, 0xb36, 0x7fffffff, 0xfffffe14}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000010c0)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000001040)={0x0, &(0x7f0000000040)=""/4096}) [ 1439.687984] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.696367] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.705262] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1439.713598] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:21 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) 21:43:21 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:21 executing program 5: socketpair(0x11, 0x4, 0x5b, 0x0) 21:43:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, r1, r2, 0x0], &(0x7f0000000140)=[0xeb, 0x7fff, 0x2, 0x9, 0x7fffffff], 0x2, 0x6, 0x6}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={r4}) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)) 21:43:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x28000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001080)={0x0, 0x0, 0xffffffffffffffff}) (async) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000001240)={0x564a, 0x1, &(0x7f0000001180)=[0x40], &(0x7f00000011c0)=[0x3, 0x3e1, 0x7fff, 0x9, 0x8], &(0x7f0000001200)=[0x9]}) (rerun: 32) connect$netlink(r3, &(0x7f0000001140), 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000001280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000001300)={0x0, &(0x7f00000012c0)=""/9}) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000001100)={0x4, 0xb36, 0x7fffffff, 0xfffffe14}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000010c0)={0x3, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000001040)={0x0, &(0x7f0000000040)=""/4096}) 21:43:21 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x80000001], [0x0, 0xffffffff], [0x0, 0x0, 0xad7d]}) 21:43:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:21 executing program 5: socketpair(0x11, 0x4, 0x5b, 0x0) 21:43:21 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x28000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001080)={0x0, 0x0, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000001240)={0x564a, 0x1, &(0x7f0000001180)=[0x40], &(0x7f00000011c0)=[0x3, 0x3e1, 0x7fff, 0x9, 0x8], &(0x7f0000001200)=[0x9]}) connect$netlink(r3, &(0x7f0000001140), 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000001280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000001300)={0x0, &(0x7f00000012c0)=""/9}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000001100)={0x4, 0xb36, 0x7fffffff, 0xfffffe14}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000010c0)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000001040)={0x0, &(0x7f0000000040)=""/4096}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x28000) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001080)) (async) socket$netlink(0x10, 0x3, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000001240)={0x564a, 0x1, &(0x7f0000001180)=[0x40], &(0x7f00000011c0)=[0x3, 0x3e1, 0x7fff, 0x9, 0x8], &(0x7f0000001200)=[0x9]}) (async) connect$netlink(r3, &(0x7f0000001140), 0xc) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000001280)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000001300)={0x0, &(0x7f00000012c0)=""/9}) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000001100)={0x4, 0xb36, 0x7fffffff, 0xfffffe14}, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000010c0)={0x3, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000001040)={0x0, &(0x7f0000000040)=""/4096}) (async) 21:43:21 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x80000001], [0x0, 0xffffffff], [0x0, 0x0, 0xad7d]}) 21:43:21 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) 21:43:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:21 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:21 executing program 5: socketpair(0x11, 0x4, 0x5b, 0x0) 21:43:21 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x80000001], [0x0, 0xffffffff], [0x0, 0x0, 0xad7d]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x80000001], [0x0, 0xffffffff], [0x0, 0x0, 0xad7d]}) (async) 21:43:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, &(0x7f0000000fc0)=[0x1, r5]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r8}, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x0, &(0x7f0000000fc0)=[0x1, r11]}, 0x80) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r3, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x400, 0x0, 0x3, 0x44, r5, 0xffffffff, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x9, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @generic={0x6, 0x1, 0x9, 0x2, 0xffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000640)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x1, '\x00', r9, 0x0, r12, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x5, 0x6, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, r13, r5]}, 0x80) ioctl$SIOCAX25GETUID(r7, 0x89e0, 0x0) 21:43:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000080)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, &(0x7f0000000fc0)=[0x1, r5]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r8}, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x0, &(0x7f0000000fc0)=[0x1, r11]}, 0x80) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r3, 0x4) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x400, 0x0, 0x3, 0x44, r5, 0xffffffff, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x9, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @generic={0x6, 0x1, 0x9, 0x2, 0xffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000640)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x1, '\x00', r9, 0x0, r12, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x5, 0x6, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, r13, r5]}, 0x80) (async) ioctl$SIOCAX25GETUID(r7, 0x89e0, 0x0) 21:43:22 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:22 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000326bd7000fddbdf25020000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x50054}, 0x4008000) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 21:43:22 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) 21:43:22 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:22 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x60010060) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {r1, r2/1000+10000}}, 0x100) 21:43:22 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) (async) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) (async) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x1) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000326bd7000fddbdf25020000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x50054}, 0x4008000) (async) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 21:43:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, &(0x7f0000000fc0)=[0x1, r5]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r8}, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x0, &(0x7f0000000fc0)=[0x1, r11]}, 0x80) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r3, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x400, 0x0, 0x3, 0x44, r5, 0xffffffff, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x9, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @generic={0x6, 0x1, 0x9, 0x2, 0xffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000640)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x1, '\x00', r9, 0x0, r12, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x5, 0x6, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, r13, r5]}, 0x80) ioctl$SIOCAX25GETUID(r7, 0x89e0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000080)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, &(0x7f0000000fc0)=[0x1, r5]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r8}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=@raw=[@generic={0x0, 0x0, 0x6, 0x0, 0x9}], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x0, &(0x7f0000000fc0)=[0x1, r11]}, 0x80) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r3, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x400, 0x0, 0x3, 0x44, r5, 0xffffffff, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x9, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @generic={0x6, 0x1, 0x9, 0x2, 0xffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000640)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x1, '\x00', r9, 0x0, r12, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x5, 0x6, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, r13, r5]}, 0x80) (async) ioctl$SIOCAX25GETUID(r7, 0x89e0, 0x0) (async) 21:43:22 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) 21:43:22 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={0x0}}, 0x4040000) 21:43:22 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:22 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 21:43:22 executing program 3: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x2, 0x44}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:22 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) (async) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) (async) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) (async) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x1) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000326bd7000fddbdf25020000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x50054}, 0x4008000) (async) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 21:43:22 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:22 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x60010060) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {r1, r2/1000+10000}}, 0x100) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x60010060) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) (async) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {r1, r2/1000+10000}}, 0x100) (async) 21:43:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) 21:43:22 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:23 executing program 3: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x2, 0x44}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:23 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:43:23 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x60010060) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {r1, r2/1000+10000}}, 0x100) 21:43:23 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2000000010001, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) 21:43:23 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000326bd7000fddbdf25020000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x50054}, 0x4008000) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 21:43:23 executing program 3: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x2, 0x44}) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:23 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair(0x2c, 0x1, 0x5, &(0x7f0000001300)) recvmsg$kcm(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/151, 0x97}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/118, 0x76}], 0x5}, 0x40) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:23 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:23 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socketpair(0xf, 0x3, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) 21:43:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2000000010001, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) 21:43:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x10000000000000, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @null]}, 0x48) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) bind$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null]}, 0x48) 21:43:23 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000326bd7000fddbdf25020000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x50054}, 0x4008000) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 21:43:23 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000040), 0x4) 21:43:23 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:43:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x10000000000000, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @null]}, 0x48) (async) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) (async) bind$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null]}, 0x48) 21:43:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2000000010001, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0x2000000010001, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) (async) 21:43:23 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000326bd7000fddbdf25020000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x50054}, 0x4008000) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 21:43:23 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000040), 0x4) [ 1442.449528] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1442.550301] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:24 executing program 2: ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, [0x0, 0x0, 0x80000], [0x0, 0x0, 0x4, 0x1], [0x0, 0x8]}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000200)={0x1, @win={{0x1, 0x8, 0x9, 0x8}, 0x3, 0x8, &(0x7f0000000140)={{0x5, 0x4, 0x5, 0x6}, &(0x7f0000000100)={{0x3, 0x7e9, 0x9, 0x4}, &(0x7f0000000040)={{0x6, 0x3, 0x4, 0x6}}}}, 0x590, &(0x7f0000000180)="0336633749d5fec98c35813b37e39402710ec85732d96a6bd38dc320a6a633303dd4df7f5efbff9c123b333fa9645e3410f888c577ebcc2e04f38c2fa3776ff1c3c4e26d6cccb5d8", 0x6}}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x515, 0x400001) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000340)) 21:43:24 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) socketpair(0x2c, 0x1, 0x5, &(0x7f0000001300)) recvmsg$kcm(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/151, 0x97}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/118, 0x76}], 0x5}, 0x40) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:24 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) socketpair(0x2b, 0x5, 0xc6, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xcede}, 0x4) 21:43:24 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000040), 0x4) 21:43:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x10000000000000, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @null]}, 0x48) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) bind$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null]}, 0x48) 21:43:24 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000326bd7000fddbdf25020000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x50054}, 0x4008000) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 21:43:24 executing program 2: ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, [0x0, 0x0, 0x80000], [0x0, 0x0, 0x4, 0x1], [0x0, 0x8]}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000200)={0x1, @win={{0x1, 0x8, 0x9, 0x8}, 0x3, 0x8, &(0x7f0000000140)={{0x5, 0x4, 0x5, 0x6}, &(0x7f0000000100)={{0x3, 0x7e9, 0x9, 0x4}, &(0x7f0000000040)={{0x6, 0x3, 0x4, 0x6}}}}, 0x590, &(0x7f0000000180)="0336633749d5fec98c35813b37e39402710ec85732d96a6bd38dc320a6a633303dd4df7f5efbff9c123b333fa9645e3410f888c577ebcc2e04f38c2fa3776ff1c3c4e26d6cccb5d8", 0x6}}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x515, 0x400001) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, [0x0, 0x0, 0x80000], [0x0, 0x0, 0x4, 0x1], [0x0, 0x8]}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000200)={0x1, @win={{0x1, 0x8, 0x9, 0x8}, 0x3, 0x8, &(0x7f0000000140)={{0x5, 0x4, 0x5, 0x6}, &(0x7f0000000100)={{0x3, 0x7e9, 0x9, 0x4}, &(0x7f0000000040)={{0x6, 0x3, 0x4, 0x6}}}}, 0x590, &(0x7f0000000180)="0336633749d5fec98c35813b37e39402710ec85732d96a6bd38dc320a6a633303dd4df7f5efbff9c123b333fa9645e3410f888c577ebcc2e04f38c2fa3776ff1c3c4e26d6cccb5d8", 0x6}}) (async) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f0000000300), 0x515, 0x400001) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000340)) (async) 21:43:24 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) socketpair(0x2b, 0x5, 0xc6, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xcede}, 0x4) socketpair(0xf, 0x3, 0x0, 0x0) (async) socketpair(0x2b, 0x5, 0xc6, &(0x7f0000000000)) (async) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xcede}, 0x4) (async) 21:43:24 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000040), 0x4) 21:43:24 executing program 2: ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, [0x0, 0x0, 0x80000], [0x0, 0x0, 0x4, 0x1], [0x0, 0x8]}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000200)={0x1, @win={{0x1, 0x8, 0x9, 0x8}, 0x3, 0x8, &(0x7f0000000140)={{0x5, 0x4, 0x5, 0x6}, &(0x7f0000000100)={{0x3, 0x7e9, 0x9, 0x4}, &(0x7f0000000040)={{0x6, 0x3, 0x4, 0x6}}}}, 0x590, &(0x7f0000000180)="0336633749d5fec98c35813b37e39402710ec85732d96a6bd38dc320a6a633303dd4df7f5efbff9c123b333fa9645e3410f888c577ebcc2e04f38c2fa3776ff1c3c4e26d6cccb5d8", 0x6}}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x515, 0x400001) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, [0x0, 0x0, 0x80000], [0x0, 0x0, 0x4, 0x1], [0x0, 0x8]}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000200)={0x1, @win={{0x1, 0x8, 0x9, 0x8}, 0x3, 0x8, &(0x7f0000000140)={{0x5, 0x4, 0x5, 0x6}, &(0x7f0000000100)={{0x3, 0x7e9, 0x9, 0x4}, &(0x7f0000000040)={{0x6, 0x3, 0x4, 0x6}}}}, 0x590, &(0x7f0000000180)="0336633749d5fec98c35813b37e39402710ec85732d96a6bd38dc320a6a633303dd4df7f5efbff9c123b333fa9645e3410f888c577ebcc2e04f38c2fa3776ff1c3c4e26d6cccb5d8", 0x6}}) (async) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f0000000300), 0x515, 0x400001) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000340)) (async) 21:43:24 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000326bd7000fddbdf25020000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x50054}, 0x4008000) 21:43:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000000000000, 0x84200) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000240)={0x0, &(0x7f0000000000)=""/166, &(0x7f0000000100)}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) [ 1443.280371] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:24 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) socketpair(0x2b, 0x5, 0xc6, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xcede}, 0x4) 21:43:25 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair(0x2c, 0x1, 0x5, &(0x7f0000001300)) recvmsg$kcm(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/151, 0x97}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/118, 0x76}], 0x5}, 0x40) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) socketpair(0x2c, 0x1, 0x5, &(0x7f0000001300)) (async) recvmsg$kcm(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/151, 0x97}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/118, 0x76}], 0x5}, 0x40) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:43:25 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) 21:43:25 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000040), 0x4) 21:43:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000000000000, 0x84200) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000240)={0x0, &(0x7f0000000000)=""/166, &(0x7f0000000100)}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:25 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@default, @bcast, @null, @default, @default, @rose, @remote, @rose]}, &(0x7f00000000c0)=0x48, 0x0) accept$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@null, @bcast, @default, @rose, @null, @bcast, @remote, @null]}, &(0x7f0000000180)=0x48) 21:43:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x3]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x3e, 0xff, 0x1d330277}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000001c0)={r3, &(0x7f0000000140)=""/26}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000240)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000003c0)={0xa3, 0x2, 0x2, 0x3, 0x40}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000340)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc02864ca, &(0x7f0000000380)={&(0x7f0000000300), &(0x7f0000000300)=[0x3, 0xffffffffffffffff, 0x2, 0x8, 0x20, 0x4, 0x8, 0x7], 0x5, 0x0, 0x1}) 21:43:25 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000001180), r0) 21:43:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000000000000, 0x84200) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000240)={0x0, &(0x7f0000000000)=""/166, &(0x7f0000000100)}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:25 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@default, @bcast, @null, @default, @default, @rose, @remote, @rose]}, &(0x7f00000000c0)=0x48, 0x0) accept$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@null, @bcast, @default, @rose, @null, @bcast, @remote, @null]}, &(0x7f0000000180)=0x48) 21:43:25 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, 0x0, 0x0) 21:43:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x3]}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x3e, 0xff, 0x1d330277}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0}]}) (rerun: 32) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000001c0)={r3, &(0x7f0000000140)=""/26}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000240)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000003c0)={0xa3, 0x2, 0x2, 0x3, 0x40}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc02864ca, &(0x7f0000000380)={&(0x7f0000000300), &(0x7f0000000300)=[0x3, 0xffffffffffffffff, 0x2, 0x8, 0x20, 0x4, 0x8, 0x7], 0x5, 0x0, 0x1}) 21:43:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x40, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:25 executing program 4: socket$kcm(0x29, 0x2, 0x0) socketpair(0x29, 0xa, 0xfd, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 21:43:25 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) socket$netlink(0x10, 0x3, 0x1) 21:43:25 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, 0x0, 0x0) 21:43:25 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@default, @bcast, @null, @default, @default, @rose, @remote, @rose]}, &(0x7f00000000c0)=0x48, 0x0) accept$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@null, @bcast, @default, @rose, @null, @bcast, @remote, @null]}, &(0x7f0000000180)=0x48) 21:43:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x3]}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x3e, 0xff, 0x1d330277}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0}]}) (rerun: 32) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000001c0)={r3, &(0x7f0000000140)=""/26}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000240)) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000003c0)={0xa3, 0x2, 0x2, 0x3, 0x40}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000340)) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc02864ca, &(0x7f0000000380)={&(0x7f0000000300), &(0x7f0000000300)=[0x3, 0xffffffffffffffff, 0x2, 0x8, 0x20, 0x4, 0x8, 0x7], 0x5, 0x0, 0x1}) 21:43:25 executing program 4: socket$kcm(0x29, 0x2, 0x0) socketpair(0x29, 0xa, 0xfd, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) socketpair(0x29, 0xa, 0xfd, &(0x7f0000000000)) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)}, 0x0) (async) 21:43:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x40, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:25 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) socketpair(0xf, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) 21:43:25 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, 0x0, 0x0) 21:43:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x6]}) 21:43:25 executing program 4: socket$kcm(0x29, 0x2, 0x0) (async) socketpair(0x29, 0xa, 0xfd, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 21:43:25 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x40, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x6]}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x6]}) (async) 21:43:25 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:25 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) socketpair(0xf, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) (async) socketpair(0xf, 0x3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) (async) 21:43:25 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) recvfrom$ax25(r1, &(0x7f0000000000)=""/195, 0xc3, 0x40, &(0x7f0000000100)={{0x3, @default, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default]}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) 21:43:25 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, 0x0, 0x0) 21:43:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x6]}) 21:43:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x21000, 0x101000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:25 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:43:25 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x21000, 0x101000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x21000, 0x101000) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:43:25 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) socketpair(0xf, 0x3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) 21:43:25 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1444.743332] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 21:43:25 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x2) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) (async) 21:43:26 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) recvfrom$ax25(r1, &(0x7f0000000000)=""/195, 0xc3, 0x40, &(0x7f0000000100)={{0x3, @default, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default]}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) recvfrom$ax25(r1, &(0x7f0000000000)=""/195, 0xc3, 0x40, &(0x7f0000000100)={{0x3, @default, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default]}, 0x48) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) 21:43:26 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:43:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x21000, 0x101000) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:26 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:26 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 21:43:26 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socketpair(0xf, 0x3, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) 21:43:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x4, 0x0, 0x7fff}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x800, 0xfffffffc, 0x0, 0x2, [], [], [], [0x4]}) 21:43:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x40, 0x40003) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:26 executing program 0: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:26 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x4, 0x0, 0x7fff}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x800, 0xfffffffc, 0x0, 0x2, [], [], [], [0x4]}) 21:43:26 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) recvfrom$ax25(r1, &(0x7f0000000000)=""/195, 0xc3, 0x40, &(0x7f0000000100)={{0x3, @default, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default]}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) 21:43:26 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:43:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x40, 0x40003) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:26 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:26 executing program 0: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x4, 0x0, 0x7fff}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x800, 0xfffffffc, 0x0, 0x2, [], [], [], [0x4]}) [ 1445.667115] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1445.696479] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 21:43:26 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r0, &(0x7f0000000000)={{}, [@bcast, @rose, @rose, @default, @remote, @bcast, @netrom, @rose]}, &(0x7f0000000100)=0x48) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0xfffffff8]}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000380)={r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) getpeername$ax25(r0, &(0x7f0000000240)={{0x3, @bcast}, [@default, @bcast, @default, @remote, @remote, @rose, @null, @bcast]}, &(0x7f00000002c0)=0x48) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000140)={0xffc000, 0x1, 0x3, 0x1ff}) r5 = syz_open_dev$dri(&(0x7f00000003c0), 0x40, 0x4000) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 21:43:26 executing program 0: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:26 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5b, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socketpair(0x18, 0x800, 0x40, 0x0) 21:43:26 executing program 0: socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5b, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socketpair(0x18, 0x800, 0x40, 0x0) [ 1445.875519] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 1445.900935] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 21:43:27 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockname$ax25(r0, &(0x7f0000000000)={{}, [@bcast, @rose, @rose, @default, @remote, @bcast, @netrom, @rose]}, &(0x7f0000000100)=0x48) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0xfffffff8]}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000380)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) getpeername$ax25(r0, &(0x7f0000000240)={{0x3, @bcast}, [@default, @bcast, @default, @remote, @remote, @rose, @null, @bcast]}, &(0x7f00000002c0)=0x48) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000140)={0xffc000, 0x1, 0x3, 0x1ff}) (async) r5 = syz_open_dev$dri(&(0x7f00000003c0), 0x40, 0x4000) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 21:43:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x40, 0x40003) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:27 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:27 executing program 0: socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5b, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) socketpair(0x18, 0x800, 0x40, 0x0) 21:43:27 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x4f, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/15, 0xf}], 0xa}, 0x40000020) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={r2}) 21:43:27 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) 21:43:27 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x4f, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/15, 0xf}], 0xa}, 0x40000020) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={r2}) 21:43:27 executing program 0: socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:27 executing program 1: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) [ 1446.802579] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 21:43:27 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x400) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={r1, 0x80000, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x94, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e7}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x44}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x83}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xee}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1ec}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4b2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) 21:43:27 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockname$ax25(r0, &(0x7f0000000000)={{}, [@bcast, @rose, @rose, @default, @remote, @bcast, @netrom, @rose]}, &(0x7f0000000100)=0x48) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0xfffffff8]}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000380)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) getpeername$ax25(r0, &(0x7f0000000240)={{0x3, @bcast}, [@default, @bcast, @default, @remote, @remote, @rose, @null, @bcast]}, &(0x7f00000002c0)=0x48) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000140)={0xffc000, 0x1, 0x3, 0x1ff}) (async) r5 = syz_open_dev$dri(&(0x7f00000003c0), 0x40, 0x4000) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 21:43:27 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) (rerun: 32) 21:43:27 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x4f, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/15, 0xf}], 0xa}, 0x40000020) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={r2}) 21:43:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:27 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:27 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x400) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={r1, 0x80000, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x94, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e7}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x44}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x83}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xee}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1ec}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4b2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) socketpair(0xf, 0x3, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x400) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={r1, 0x80000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x94, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e7}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x44}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x83}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xee}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1ec}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4b2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) (async) [ 1447.006344] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 21:43:27 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:27 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:27 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xfffffff8, 0xf1, 0x0, 0x802, 0x1, 0xe00000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x4}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) 21:43:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x400) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={r1, 0x80000, 0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x94, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e7}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x44}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x83}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xee}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1ec}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4b2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000280)) 21:43:28 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) 21:43:28 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:28 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xfffffff8, 0xf1, 0x0, 0x802, 0x1, 0xe00000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x4}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) socket$kcm(0x29, 0x0, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xfffffff8, 0xf1, 0x0, 0x802, 0x1, 0xe00000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x4}, 0x48) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) (async) 21:43:28 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 21:43:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x240) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:28 executing program 0: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:28 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xfffffff8, 0xf1, 0x0, 0x802, 0x1, 0xe00000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x4}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) 21:43:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 21:43:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 0: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x240) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:28 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 21:43:28 executing program 0: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:28 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) recvmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/208, 0xd0}], 0x2, &(0x7f00000011c0)=""/17, 0x11}, 0x40) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001340)={&(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0], &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x1ff}) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x240) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:28 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) 21:43:28 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x0, 0xb84d7b3}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) 21:43:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x0, 0xb84d7b3}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x0, 0xb84d7b3}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:43:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:28 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:29 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) recvmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/208, 0xd0}], 0x2, &(0x7f00000011c0)=""/17, 0x11}, 0x40) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001340)={&(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0], &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x1ff}) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/208, 0xd0}], 0x2, &(0x7f00000011c0)=""/17, 0x11}, 0x40) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001340)={&(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0], &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x1ff}) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:43:29 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) 21:43:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x0, 0xb84d7b3}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:29 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) 21:43:29 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) 21:43:29 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x4040000) 21:43:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 21:43:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) 21:43:29 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async, rerun: 32) recvmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/208, 0xd0}], 0x2, &(0x7f00000011c0)=""/17, 0x11}, 0x40) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001340)={&(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0], &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x1ff}) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x100000000, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xb, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000008000000000000003551000018360000030000000000000000000000851000000500000003e0070086e20000185b00000a0000000000000000000000182900008fedf97dfb9497d4760344e68d1b496fdb91ba06a60dfe87269d01bf13ab7e420fb637f8ace5c26894cf4ecc96b85fbe9833d907aa3c8053748ebb865be1f8618db0adff666763fa5a5b73fb941565064f369e0e4e9dd1dc0586a87f85c0eab77e2f335906803b40babcd6d8aff8b489709100042b5e43c6b3e351c7add8abf03015929c912bff057d2fafabb86f280dd500000000000000", @ANYRESHEX=0x0, @ANYBLOB="0000000008000000950000ea97a4278a4432e590729900000000001a0e683b10bba271ba48bf4a4667d455f33550804b48dbb52c10349e6cf83b4363fe4f9a8ae6af96c930d789663fc91523183b9a59091bca8e604ea930b91cb81f38a1e6319561affc58521dad17c3ad81faff0ee39bedbc6f6a6256a651e87d30fc009aab958a331e1673da8f51c321d2f3b4e80953fd46780e8d83c8a3dfacefd188d437a610c336684107bed1a69973af08d7413063c9cb97c27193"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000300)=""/4096, 0xb933a7a41d3fb2d1, 0xc, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001340)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x0, 0xf, 0x9, 0x2}, 0x10}, 0x80) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@bcast, @rose, @remote, @bcast, @remote, @netrom, @default, @bcast]}, &(0x7f0000001600)=0x48) accept4$ax25(r2, &(0x7f0000001640)={{0x3, @rose}, [@netrom, @rose, @rose, @null, @remote, @default, @default, @null]}, &(0x7f00000016c0)=0x48, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept4$ax25(r3, &(0x7f0000001440)={{0x3, @netrom}, [@default, @bcast, @remote, @null, @remote, @rose, @bcast, @bcast]}, &(0x7f00000014c0)=0x48, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@bcast, @remote, @netrom, @rose, @rose, @rose, @null]}, &(0x7f0000001780)=0x48) getsockname$ax25(r5, &(0x7f0000001700)={{0x3, @netrom}, [@bcast, @netrom, @null, @netrom, @null, @bcast, @bcast, @netrom]}, &(0x7f0000000200)=0x8f) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x7, 0x5, 0x0, 0x8000, 0x1, [0xffff8000, 0x7ff, 0x6, 0x6], [0xfffffffc, 0x121, 0x7, 0x5], [0x7fffffff, 0x1, 0x1000, 0x8], [0x4, 0x4, 0x8001, 0xb44]}) 21:43:29 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000001040)={0x101, 0xbb8, 0xfffffff9, 0xabf2}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 21:43:29 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x4040000) 21:43:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) [ 1448.627628] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1448.664481] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x100000000, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xb, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000008000000000000003551000018360000030000000000000000000000851000000500000003e0070086e20000185b00000a0000000000000000000000182900008fedf97dfb9497d4760344e68d1b496fdb91ba06a60dfe87269d01bf13ab7e420fb637f8ace5c26894cf4ecc96b85fbe9833d907aa3c8053748ebb865be1f8618db0adff666763fa5a5b73fb941565064f369e0e4e9dd1dc0586a87f85c0eab77e2f335906803b40babcd6d8aff8b489709100042b5e43c6b3e351c7add8abf03015929c912bff057d2fafabb86f280dd500000000000000", @ANYRESHEX=0x0, @ANYBLOB="0000000008000000950000ea97a4278a4432e590729900000000001a0e683b10bba271ba48bf4a4667d455f33550804b48dbb52c10349e6cf83b4363fe4f9a8ae6af96c930d789663fc91523183b9a59091bca8e604ea930b91cb81f38a1e6319561affc58521dad17c3ad81faff0ee39bedbc6f6a6256a651e87d30fc009aab958a331e1673da8f51c321d2f3b4e80953fd46780e8d83c8a3dfacefd188d437a610c336684107bed1a69973af08d7413063c9cb97c27193"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000300)=""/4096, 0xb933a7a41d3fb2d1, 0xc, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001340)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x0, 0xf, 0x9, 0x2}, 0x10}, 0x80) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@bcast, @rose, @remote, @bcast, @remote, @netrom, @default, @bcast]}, &(0x7f0000001600)=0x48) accept4$ax25(r2, &(0x7f0000001640)={{0x3, @rose}, [@netrom, @rose, @rose, @null, @remote, @default, @default, @null]}, &(0x7f00000016c0)=0x48, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept4$ax25(r3, &(0x7f0000001440)={{0x3, @netrom}, [@default, @bcast, @remote, @null, @remote, @rose, @bcast, @bcast]}, &(0x7f00000014c0)=0x48, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@bcast, @remote, @netrom, @rose, @rose, @rose, @null]}, &(0x7f0000001780)=0x48) getsockname$ax25(r5, &(0x7f0000001700)={{0x3, @netrom}, [@bcast, @netrom, @null, @netrom, @null, @bcast, @bcast, @netrom]}, &(0x7f0000000200)=0x8f) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x7, 0x5, 0x0, 0x8000, 0x1, [0xffff8000, 0x7ff, 0x6, 0x6], [0xfffffffc, 0x121, 0x7, 0x5], [0x7fffffff, 0x1, 0x1000, 0x8], [0x4, 0x4, 0x8001, 0xb44]}) syz_open_dev$dri(&(0x7f00000000c0), 0x100000000, 0x0) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xb, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000008000000000000003551000018360000030000000000000000000000851000000500000003e0070086e20000185b00000a0000000000000000000000182900008fedf97dfb9497d4760344e68d1b496fdb91ba06a60dfe87269d01bf13ab7e420fb637f8ace5c26894cf4ecc96b85fbe9833d907aa3c8053748ebb865be1f8618db0adff666763fa5a5b73fb941565064f369e0e4e9dd1dc0586a87f85c0eab77e2f335906803b40babcd6d8aff8b489709100042b5e43c6b3e351c7add8abf03015929c912bff057d2fafabb86f280dd500000000000000", @ANYRESHEX=0x0, @ANYBLOB="0000000008000000950000ea97a4278a4432e590729900000000001a0e683b10bba271ba48bf4a4667d455f33550804b48dbb52c10349e6cf83b4363fe4f9a8ae6af96c930d789663fc91523183b9a59091bca8e604ea930b91cb81f38a1e6319561affc58521dad17c3ad81faff0ee39bedbc6f6a6256a651e87d30fc009aab958a331e1673da8f51c321d2f3b4e80953fd46780e8d83c8a3dfacefd188d437a610c336684107bed1a69973af08d7413063c9cb97c27193"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000300)=""/4096, 0xb933a7a41d3fb2d1, 0xc, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001340)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x0, 0xf, 0x9, 0x2}, 0x10}, 0x80) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@bcast, @rose, @remote, @bcast, @remote, @netrom, @default, @bcast]}, &(0x7f0000001600)=0x48) (async) accept4$ax25(r2, &(0x7f0000001640)={{0x3, @rose}, [@netrom, @rose, @rose, @null, @remote, @default, @default, @null]}, &(0x7f00000016c0)=0x48, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) accept4$ax25(r3, &(0x7f0000001440)={{0x3, @netrom}, [@default, @bcast, @remote, @null, @remote, @rose, @bcast, @bcast]}, &(0x7f00000014c0)=0x48, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@bcast, @remote, @netrom, @rose, @rose, @rose, @null]}, &(0x7f0000001780)=0x48) (async) getsockname$ax25(r5, &(0x7f0000001700)={{0x3, @netrom}, [@bcast, @netrom, @null, @netrom, @null, @bcast, @bcast, @netrom]}, &(0x7f0000000200)=0x8f) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x7, 0x5, 0x0, 0x8000, 0x1, [0xffff8000, 0x7ff, 0x6, 0x6], [0xfffffffc, 0x121, 0x7, 0x5], [0x7fffffff, 0x1, 0x1000, 0x8], [0x4, 0x4, 0x8001, 0xb44]}) (async) 21:43:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 21:43:29 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000001080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc) 21:43:29 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x4040000) 21:43:29 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) [ 1448.771508] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1448.806960] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:30 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffffffffff97, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x100000000, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xb, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000008000000000000003551000018360000030000000000000000000000851000000500000003e0070086e20000185b00000a0000000000000000000000182900008fedf97dfb9497d4760344e68d1b496fdb91ba06a60dfe87269d01bf13ab7e420fb637f8ace5c26894cf4ecc96b85fbe9833d907aa3c8053748ebb865be1f8618db0adff666763fa5a5b73fb941565064f369e0e4e9dd1dc0586a87f85c0eab77e2f335906803b40babcd6d8aff8b489709100042b5e43c6b3e351c7add8abf03015929c912bff057d2fafabb86f280dd500000000000000", @ANYRESHEX=0x0, @ANYBLOB="0000000008000000950000ea97a4278a4432e590729900000000001a0e683b10bba271ba48bf4a4667d455f33550804b48dbb52c10349e6cf83b4363fe4f9a8ae6af96c930d789663fc91523183b9a59091bca8e604ea930b91cb81f38a1e6319561affc58521dad17c3ad81faff0ee39bedbc6f6a6256a651e87d30fc009aab958a331e1673da8f51c321d2f3b4e80953fd46780e8d83c8a3dfacefd188d437a610c336684107bed1a69973af08d7413063c9cb97c27193"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000300)=""/4096, 0xb933a7a41d3fb2d1, 0xc, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001340)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x0, 0xf, 0x9, 0x2}, 0x10}, 0x80) (async) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@bcast, @rose, @remote, @bcast, @remote, @netrom, @default, @bcast]}, &(0x7f0000001600)=0x48) accept4$ax25(r2, &(0x7f0000001640)={{0x3, @rose}, [@netrom, @rose, @rose, @null, @remote, @default, @default, @null]}, &(0x7f00000016c0)=0x48, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (rerun: 64) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept4$ax25(r3, &(0x7f0000001440)={{0x3, @netrom}, [@default, @bcast, @remote, @null, @remote, @rose, @bcast, @bcast]}, &(0x7f00000014c0)=0x48, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (rerun: 32) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@bcast, @remote, @netrom, @rose, @rose, @rose, @null]}, &(0x7f0000001780)=0x48) getsockname$ax25(r5, &(0x7f0000001700)={{0x3, @netrom}, [@bcast, @netrom, @null, @netrom, @null, @bcast, @bcast, @netrom]}, &(0x7f0000000200)=0x8f) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x7, 0x5, 0x0, 0x8000, 0x1, [0xffff8000, 0x7ff, 0x6, 0x6], [0xfffffffc, 0x121, 0x7, 0x5], [0x7fffffff, 0x1, 0x1000, 0x8], [0x4, 0x4, 0x8001, 0xb44]}) 21:43:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:30 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:30 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:30 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1449.708696] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:31 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffffffffff97, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffffffffff97, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:43:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:31 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000012c0)=0x9, 0x4) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:31 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) 21:43:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:32 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffffffffff97, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:32 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 21:43:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000001, 0x0, [0xc5b, 0xffffffff], [], [0x0, 0x4d], [0x0, 0x0, 0x7]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:32 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 21:43:33 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:33 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:33 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, 0x0, 0x0, r1, r2], 0x5}) r3 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:33 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) 21:43:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 21:43:33 executing program 1: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280), 0xc) 21:43:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) 21:43:33 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:33 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:33 executing program 1: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280), 0xc) 21:43:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x391240) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$pvfs2(&(0x7f0000000640), 0x0, 0x0, 0x2, &(0x7f0000000b00)=[{&(0x7f00000006c0)}, {0x0}], 0x0, &(0x7f0000000b80)={[{'-'}, {'$\'%,.'}], [{@measure}]}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 21:43:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) 21:43:34 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, 0x0, 0x0, r1, r2], 0x5}) r3 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:34 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:34 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) 21:43:34 executing program 1: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280), 0xc) 21:43:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x391240) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) syz_mount_image$pvfs2(&(0x7f0000000640), 0x0, 0x0, 0x2, &(0x7f0000000b00)=[{&(0x7f00000006c0)}, {0x0}], 0x0, &(0x7f0000000b80)={[{'-'}, {'$\'%,.'}], [{@measure}]}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 21:43:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc) 21:43:34 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:34 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:35 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, 0x0, 0x0, r1, r2], 0x5}) r3 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, 0x0, 0x0, r1, r2], 0x5}) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:43:35 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x391240) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$pvfs2(&(0x7f0000000640), 0x0, 0x0, 0x2, &(0x7f0000000b00)=[{&(0x7f00000006c0)}, {0x0}], 0x0, &(0x7f0000000b80)={[{'-'}, {'$\'%,.'}], [{@measure}]}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x391240) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) syz_mount_image$pvfs2(&(0x7f0000000640), 0x0, 0x0, 0x2, &(0x7f0000000b00)=[{&(0x7f00000006c0)}, {0x0}], 0x0, &(0x7f0000000b80)={[{'-'}, {'$\'%,.'}], [{@measure}]}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) 21:43:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:35 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:35 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000001280), 0xc) 21:43:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x3}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:35 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r5, r6/1000+60000}, {r7, r8/1000+60000}}, 0x100) 21:43:35 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280), 0xc) 21:43:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 21:43:35 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:35 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4040000) 21:43:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x3}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:35 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 21:43:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280), 0xc) 21:43:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x3}) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 21:43:36 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r5, r6/1000+60000}, {r7, r8/1000+60000}}, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) (async) socket$kcm(0x29, 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) (async) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) (async) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x1, &(0x7f0000000080)) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r5, r6/1000+60000}, {r7, r8/1000+60000}}, 0x100) (async) 21:43:36 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 21:43:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000001280), 0xc) 21:43:36 executing program 2: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 21:43:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) 21:43:36 executing program 2: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) 21:43:36 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r5, r6/1000+60000}, {r7, r8/1000+60000}}, 0x100) 21:43:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 21:43:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) 21:43:36 executing program 2: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:36 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) (async) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r5, r6/1000+60000}, {r7, r8/1000+60000}}, 0x100) 21:43:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) 21:43:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) 21:43:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 21:43:36 executing program 2: socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:36 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r5, r6/1000+60000}, {r7, r8/1000+60000}}, 0x100) 21:43:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) 21:43:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x3}) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) (async, rerun: 32) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x0, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:37 executing program 2: socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:37 executing program 4: socket$kcm(0x29, 0x2, 0x0) 21:43:37 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @remote, @null, @remote, @remote, @remote, @bcast]}, &(0x7f0000000080)=0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:43:37 executing program 2: socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) (async) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) (async) 21:43:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x0, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:37 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r5, r6/1000+60000}, {r7, r8/1000+60000}}, 0x100) 21:43:37 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getpeername$ax25(r1, &(0x7f0000000040)={{0x3, @null}, [@default, @bcast, @rose, @rose, @remote, @default, @default, @bcast]}, &(0x7f0000000100)=0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:37 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:37 executing program 4: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) 21:43:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x0, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:37 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @remote, @null, @remote, @remote, @remote, @bcast]}, &(0x7f0000000080)=0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:43:37 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:37 executing program 4: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) 21:43:37 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x0, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) [ 1457.052699] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1457.083825] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:38 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x1, &(0x7f0000000080)) 21:43:38 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r1, 0x4) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:38 executing program 2: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:38 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @remote, @null, @remote, @remote, @remote, @bcast]}, &(0x7f0000000080)=0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 21:43:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:38 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x20, 0x141040) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null]}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@null, @default, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x7}, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x0, 0x400, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0xfffffffe}}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000bcac4bab3f9810bf486a0eaf6f9c0a96fcdce21ba50ee8381bea506128542ccae9e9780269fb252ee8f141c496ebec4a88ac3c1ffdf262cd61a05a23a22c172142342d17bdb5425beafa7d80d1298fcd3a3774097ecf7300"/105, @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf25570000000600950006000000060095000700000006009500050000000600950008000000060095000002000006009500247f0000"], 0x44}, 0x1, 0x0, 0x0, 0x4000808}, 0x20) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r4 = accept$ax25(r1, &(0x7f00000003c0)={{0x3, @bcast}, [@rose, @netrom, @netrom, @netrom, @bcast, @remote, @netrom]}, &(0x7f0000000440)=0x48) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000480)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) accept$ax25(r3, 0x0, &(0x7f0000000200)) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000040), 0x4) 21:43:38 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:38 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @remote, @null, @remote, @remote, @remote, @bcast]}, &(0x7f0000000080)=0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 21:43:38 executing program 2: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) [ 1457.833564] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:38 executing program 2: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) [ 1457.909921] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:39 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x1, &(0x7f0000000080)) 21:43:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 21:43:39 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:39 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @remote, @null, @remote, @remote, @remote, @bcast]}, &(0x7f0000000080)=0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 21:43:39 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:39 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r1, 0x4) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r1, 0x4) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:43:39 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) 21:43:39 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @remote, @null, @remote, @remote, @remote, @bcast]}, &(0x7f0000000080)=0x48) socket$nl_generic(0x10, 0x3, 0x10) 21:43:39 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:39 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) 21:43:39 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) [ 1458.737283] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:39 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @remote, @null, @remote, @remote, @remote, @bcast]}, &(0x7f0000000080)=0x48) [ 1458.835659] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:40 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r3}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) clock_gettime(0x1, &(0x7f0000000080)) 21:43:40 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:40 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) 21:43:40 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) 21:43:40 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:40 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r1, 0x4) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:40 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) socket$netlink(0x10, 0x3, 0xc) 21:43:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:43:40 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:40 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r3}) clock_gettime(0x1, &(0x7f0000000080)) 21:43:40 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x4040000) 21:43:40 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = geteuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) 21:43:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:43:40 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:40 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0}) clock_gettime(0x1, &(0x7f0000000080)) 21:43:40 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x4040000) 21:43:40 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:41 executing program 4: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "93ec5cdcb4125a8e", "90310ace9e73ed0272129925fe4920a7", "16688b6f", "b1cf42f82360476c"}, 0x28) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "21125962c93e1a1d", "dc556a87288c00000600000300", "655a26d0", "858bff14ad088f19"}, 0x28) r0 = socket$kcm(0x29, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0xc57b, 0x1, 0x3, 0x3b0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000100)="746688dc83a12dc104c345bb9f77211a41a8a3bfe9c64d4fa6db78208404effd1af85ceedf1ceefb2f378b5b75950d2f018adcd3be147b1909099e8abfe59820818d98db236a9ad85658f011eeffa111b43659e2a1a28a585c52a9a2d09f849bf70c3d729e1269d3c4aa1cd9436bc980bf26e812350595dd6aeebe313a916e4d08aed5b9980be29ccb3acf805aad6b4df811e4a200b0d9ff01b5b66bcc5253cecfbfafcb827824d78f480553a5980011736dfdbb67f8ce0ebd90ce5384926c28ab539082fb27804bb8d59bb3525e0ba41a933403041e137ddf61a10ee56d627d68949bb8320493cf5c7804df262484c4678f36", &(0x7f0000000200)=""/79, &(0x7f0000000280)="a2c73f410484fe7186b51abbdfef028ce20f9cffa7cb6dcbb476b08a76318669413abf341c5fd834edb6ac9dd05d82dbb85013eb840ed36891b4df422a248964173dbd2cac12252f57554c73546b8593dc81d35e5be33562f0505a9f39f40dfe1208e3aa41c8fa97b313d104b9d1f46e8f0897992658c1096ef148e3b09feee7d3b73230d26b10f00db7e8f886c65a55c206b7a1816208ef5c01d543b7940dd7e7d90649629668154b40cfbe7a570a99652a1b97c35a3760d601e8bb6912cccf19d715639bc6f4aa4ef501c7f872ada000bdddee", &(0x7f0000000040)="18e790", 0x0, r1}, 0x38) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "b5edf656b93c6e76", "128c85130f0d16578fff46704d9100e650c1c5775818f87046d099a15453ff8a", "3a1c9f37", "fdc7532fea1c79a7"}, 0x38) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xfffffffffffffdb7, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:41 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:43:41 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:41 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) clock_gettime(0x1, &(0x7f0000000080)) 21:43:41 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x4040000) 21:43:41 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:41 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:41 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:41 executing program 4: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "93ec5cdcb4125a8e", "90310ace9e73ed0272129925fe4920a7", "16688b6f", "b1cf42f82360476c"}, 0x28) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "21125962c93e1a1d", "dc556a87288c00000600000300", "655a26d0", "858bff14ad088f19"}, 0x28) r0 = socket$kcm(0x29, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0xc57b, 0x1, 0x3, 0x3b0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000100)="746688dc83a12dc104c345bb9f77211a41a8a3bfe9c64d4fa6db78208404effd1af85ceedf1ceefb2f378b5b75950d2f018adcd3be147b1909099e8abfe59820818d98db236a9ad85658f011eeffa111b43659e2a1a28a585c52a9a2d09f849bf70c3d729e1269d3c4aa1cd9436bc980bf26e812350595dd6aeebe313a916e4d08aed5b9980be29ccb3acf805aad6b4df811e4a200b0d9ff01b5b66bcc5253cecfbfafcb827824d78f480553a5980011736dfdbb67f8ce0ebd90ce5384926c28ab539082fb27804bb8d59bb3525e0ba41a933403041e137ddf61a10ee56d627d68949bb8320493cf5c7804df262484c4678f36", &(0x7f0000000200)=""/79, &(0x7f0000000280)="a2c73f410484fe7186b51abbdfef028ce20f9cffa7cb6dcbb476b08a76318669413abf341c5fd834edb6ac9dd05d82dbb85013eb840ed36891b4df422a248964173dbd2cac12252f57554c73546b8593dc81d35e5be33562f0505a9f39f40dfe1208e3aa41c8fa97b313d104b9d1f46e8f0897992658c1096ef148e3b09feee7d3b73230d26b10f00db7e8f886c65a55c206b7a1816208ef5c01d543b7940dd7e7d90649629668154b40cfbe7a570a99652a1b97c35a3760d601e8bb6912cccf19d715639bc6f4aa4ef501c7f872ada000bdddee", &(0x7f0000000040)="18e790", 0x0, r1}, 0x38) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "b5edf656b93c6e76", "128c85130f0d16578fff46704d9100e650c1c5775818f87046d099a15453ff8a", "3a1c9f37", "fdc7532fea1c79a7"}, 0x38) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xfffffffffffffdb7, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:41 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 21:43:41 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) socket$kcm(0x29, 0x2, 0x0) clock_gettime(0x1, &(0x7f0000000080)) 21:43:41 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 21:43:41 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:41 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) clock_gettime(0x1, &(0x7f0000000080)) 21:43:41 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:41 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:41 executing program 4: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "93ec5cdcb4125a8e", "90310ace9e73ed0272129925fe4920a7", "16688b6f", "b1cf42f82360476c"}, 0x28) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "21125962c93e1a1d", "dc556a87288c00000600000300", "655a26d0", "858bff14ad088f19"}, 0x28) (async) r0 = socket$kcm(0x29, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0xc57b, 0x1, 0x3, 0x3b0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000100)="746688dc83a12dc104c345bb9f77211a41a8a3bfe9c64d4fa6db78208404effd1af85ceedf1ceefb2f378b5b75950d2f018adcd3be147b1909099e8abfe59820818d98db236a9ad85658f011eeffa111b43659e2a1a28a585c52a9a2d09f849bf70c3d729e1269d3c4aa1cd9436bc980bf26e812350595dd6aeebe313a916e4d08aed5b9980be29ccb3acf805aad6b4df811e4a200b0d9ff01b5b66bcc5253cecfbfafcb827824d78f480553a5980011736dfdbb67f8ce0ebd90ce5384926c28ab539082fb27804bb8d59bb3525e0ba41a933403041e137ddf61a10ee56d627d68949bb8320493cf5c7804df262484c4678f36", &(0x7f0000000200)=""/79, &(0x7f0000000280)="a2c73f410484fe7186b51abbdfef028ce20f9cffa7cb6dcbb476b08a76318669413abf341c5fd834edb6ac9dd05d82dbb85013eb840ed36891b4df422a248964173dbd2cac12252f57554c73546b8593dc81d35e5be33562f0505a9f39f40dfe1208e3aa41c8fa97b313d104b9d1f46e8f0897992658c1096ef148e3b09feee7d3b73230d26b10f00db7e8f886c65a55c206b7a1816208ef5c01d543b7940dd7e7d90649629668154b40cfbe7a570a99652a1b97c35a3760d601e8bb6912cccf19d715639bc6f4aa4ef501c7f872ada000bdddee", &(0x7f0000000040)="18e790", 0x0, r1}, 0x38) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "b5edf656b93c6e76", "128c85130f0d16578fff46704d9100e650c1c5775818f87046d099a15453ff8a", "3a1c9f37", "fdc7532fea1c79a7"}, 0x38) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xfffffffffffffdb7, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 21:43:41 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:41 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:41 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) clock_gettime(0x1, &(0x7f0000000080)) 21:43:41 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@default, @bcast, @null, @bcast, @remote, @bcast, @netrom, @rose]}, &(0x7f0000000180)=0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 21:43:41 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4040000) 21:43:41 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:41 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) clock_gettime(0x1, &(0x7f0000000080)) 21:43:41 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:41 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:41 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 21:43:41 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:41 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:41 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x1, &(0x7f0000000080)) 21:43:41 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) 21:43:41 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:42 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:42 executing program 0: clock_gettime(0x1, &(0x7f0000000080)) 21:43:42 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:42 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) (async, rerun: 32) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async, rerun: 32) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@default, @bcast, @null, @bcast, @remote, @bcast, @netrom, @rose]}, &(0x7f0000000180)=0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 21:43:42 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:42 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008048}, 0x4040000) 21:43:42 executing program 0: clock_gettime(0x0, &(0x7f0000000080)) 21:43:42 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:43:42 executing program 0: clock_gettime(0x0, &(0x7f0000000080)) 21:43:42 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25GETUID(r4, 0x89e0, 0x0) 21:43:42 executing program 1: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:43:42 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r0, r1, 0x0], 0x3}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x2200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)={r0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) socketpair(0x29, 0x4, 0x5, &(0x7f0000000140)) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x1, &(0x7f0000000080)) 21:43:42 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000000)=0x1, 0x4) 21:43:42 executing program 0: clock_gettime(0x0, &(0x7f0000000080)) [ 1461.905357] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1461.919665] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1461.933675] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1461.948952] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1461.961818] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:43 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@default, @bcast, @null, @bcast, @remote, @bcast, @netrom, @rose]}, &(0x7f0000000180)=0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@default, @bcast, @null, @bcast, @remote, @bcast, @netrom, @rose]}, &(0x7f0000000180)=0x48) (async) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) 21:43:43 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000000)=0x1, 0x4) 21:43:43 executing program 0: clock_gettime(0x1, 0x0) 21:43:43 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:43 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25GETUID(r4, 0x89e0, 0x0) 21:43:43 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000000)=0x1, 0x4) [ 1462.628357] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1462.649783] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:43 executing program 0: clock_gettime(0x1, 0x0) 21:43:43 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:43 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0) 21:43:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x21002) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000140)={0xa, &(0x7f00000001c0)=""/252, &(0x7f0000001940)=[{0x80000001, 0x8c, 0x5, &(0x7f00000002c0)=""/140}, {0x46f7, 0x96, 0x268, &(0x7f0000000380)=""/150}, {0xe2cb0db, 0x56, 0x294, &(0x7f0000000440)=""/86}, {0x0, 0xbe, 0x0, &(0x7f00000004c0)=""/190}, {0x9, 0x85, 0x20, &(0x7f0000000580)=""/133}, {0x3, 0xd7, 0x1, &(0x7f0000000640)=""/215}, {0x6, 0x56, 0x0, &(0x7f0000000740)=""/86}, {0xffffff00, 0xd0, 0xdf, &(0x7f00000007c0)=""/208}, {0x6, 0x1000, 0x4, &(0x7f00000008c0)=""/4096}, {0x3, 0x64, 0x80, &(0x7f00000018c0)=""/100}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000001a80)={&(0x7f0000001a40)=[0x0], 0x1}) [ 1462.675699] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1462.697870] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:43 executing program 0: clock_gettime(0x1, 0x0) 21:43:43 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) ioctl$SIOCAX25GETUID(r4, 0x89e0, 0x0) [ 1462.731428] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1462.823633] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1462.838908] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1462.854746] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1462.869367] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1462.883741] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:44 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0) 21:43:44 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 21:43:44 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) 21:43:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)) 21:43:44 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) 21:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000e0ff"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x4040000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40801) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x7, 0xfffffffffffffffd}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0x12100) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:44 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) 21:43:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)) [ 1463.523507] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)) 21:43:44 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0) [ 1463.565784] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1463.605313] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:44 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) 21:43:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)) 21:43:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)) 21:43:44 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000), 0x4) [ 1463.638084] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1463.648031] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:44 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 21:43:44 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) 21:43:44 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000), 0x4) [ 1463.775717] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1463.815390] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1463.825281] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1463.835346] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000e0ff"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x4040000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40801) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x7, 0xfffffffffffffffd}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0x12100) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000e0ff"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x4040000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40801) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x7, 0xfffffffffffffffd}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0x12100) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:43:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)) 21:43:45 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) 21:43:45 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000), 0x4) 21:43:45 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) 21:43:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:45 executing program 2: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) 21:43:45 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000), 0x4) [ 1464.496348] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1464.522866] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) [ 1464.554410] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1464.585695] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000e0ff"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x4040000) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40801) (async, rerun: 64) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x7, 0xfffffffffffffffd}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0x12100) (rerun: 64) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) (async, rerun: 32) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:45 executing program 2: syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) 21:43:45 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 21:43:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:45 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) 21:43:45 executing program 2: syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) 21:43:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) [ 1464.730826] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) [ 1464.775025] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1464.806139] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:45 executing program 2: syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) 21:43:45 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) [ 1464.836458] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) [ 1464.877144] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1464.897950] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1464.926282] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1464.935642] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1464.956870] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1464.966750] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:46 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000), 0x4) 21:43:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:46 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/116, 0x74}, {&(0x7f0000001200)=""/143, 0x8f}, {&(0x7f00000012c0)=""/75, 0x4b}, {&(0x7f0000001340)=""/29, 0x1d}], 0x7}, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) 21:43:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:46 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:46 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000), 0x4) 21:43:46 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) 21:43:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) [ 1465.627713] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1465.648971] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:46 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) [ 1465.674162] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:46 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) 21:43:46 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) [ 1465.778577] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1465.813263] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1465.841174] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1465.855230] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1465.868437] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 21:43:47 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/203, 0xcb, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) 21:43:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:47 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/116, 0x74}, {&(0x7f0000001200)=""/143, 0x8f}, {&(0x7f00000012c0)=""/75, 0x4b}, {&(0x7f0000001340)=""/29, 0x1d}], 0x7}, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/116, 0x74}, {&(0x7f0000001200)=""/143, 0x8f}, {&(0x7f00000012c0)=""/75, 0x4b}, {&(0x7f0000001340)=""/29, 0x1d}], 0x7}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) 21:43:47 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000380)) 21:43:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) [ 1466.566721] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:47 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) [ 1466.616119] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 1466.725485] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1466.740362] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:48 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/116, 0x74}, {&(0x7f0000001200)=""/143, 0x8f}, {&(0x7f00000012c0)=""/75, 0x4b}, {&(0x7f0000001340)=""/29, 0x1d}], 0x7}, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:48 executing program 0: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:48 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)) 21:43:48 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:48 executing program 0: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) syz_open_dev$dri(&(0x7f0000000340), 0x7f, 0x305481) 21:43:48 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r1, &(0x7f0000000240)={{}, [@netrom, @netrom, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r2, 0x0, &(0x7f0000000300)) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) 21:43:48 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @remote, @default, @rose, @null, @bcast, @default]}, &(0x7f0000000180)=0x48) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) [ 1467.532412] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 1467.552985] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1467.562639] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 21:43:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r3}) [ 1467.692103] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 1467.707114] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 1467.720802] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 1467.738078] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 1467.755507] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 1467.771091] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 21:43:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:49 executing program 0: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:49 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) accept$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @remote, @null, @remote, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:49 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:43:49 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) socketpair(0x25, 0x3, 0xcd04, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r3}) socket$kcm(0x29, 0x0, 0x0) 21:43:49 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:43:49 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:49 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 21:43:49 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) [ 1468.527248] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:49 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:43:49 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r1, r2], 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:49 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 21:43:49 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 21:43:49 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) [ 1468.695813] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:43:50 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) socketpair(0x25, 0x3, 0xcd04, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r3}) socket$kcm(0x29, 0x0, 0x0) 21:43:50 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:50 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 21:43:50 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 21:43:50 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:50 executing program 2: socketpair(0xf, 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 21:43:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:50 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:50 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:50 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:51 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) socketpair(0x25, 0x3, 0xcd04, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r3}) socket$kcm(0x29, 0x0, 0x0) 21:43:51 executing program 5: socketpair(0xa, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:43:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x7], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:51 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:51 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 21:43:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 21:43:51 executing program 5: socketpair(0x0, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:51 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 21:43:52 executing program 5: socketpair(0x0, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:52 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 21:43:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 21:43:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 21:43:52 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'sit0\x00', r1, 0x29, 0x80, 0x0, 0x7, 0x0, @local, @remote, 0x8000, 0x1, 0x1f, 0x7}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xc15, 0x8}, 0xc) 21:43:52 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 21:43:52 executing program 5: socketpair(0x0, 0x80000, 0xfffff800, &(0x7f0000000340)) 21:43:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 21:43:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 21:43:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)) 21:43:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 21:43:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)) 21:43:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r0}) 21:43:52 executing program 5: socketpair(0xa, 0x0, 0xfffff800, &(0x7f0000000340)) 21:43:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:53 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'sit0\x00', r1, 0x29, 0x80, 0x0, 0x7, 0x0, @local, @remote, 0x8000, 0x1, 0x1f, 0x7}}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xc15, 0x8}, 0xc) 21:43:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)) 21:43:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 21:43:53 executing program 5: socketpair(0xa, 0x0, 0x0, &(0x7f0000000340)) 21:43:53 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:53 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x2}) 21:43:53 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:53 executing program 5: socketpair(0xa, 0x0, 0x0, &(0x7f0000000340)) 21:43:53 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:54 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'sit0\x00', r1, 0x29, 0x80, 0x0, 0x7, 0x0, @local, @remote, 0x8000, 0x1, 0x1f, 0x7}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xc15, 0x8}, 0xc) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'sit0\x00', r1, 0x29, 0x80, 0x0, 0x7, 0x0, @local, @remote, 0x8000, 0x1, 0x1f, 0x7}}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xc15, 0x8}, 0xc) (async) 21:43:54 executing program 0: r0 = socket$kcm(0x29, 0x9, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x9, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6c50, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x33}, @map_fd={0x18, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0x21, 0x46, &(0x7f0000000440)=""/70, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0x1ff, 0x77}, 0x10}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', r2, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:54 executing program 5: socketpair(0xa, 0x0, 0x0, &(0x7f0000000340)) 21:43:54 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) recvfrom$ax25(r0, &(0x7f0000000180)=""/165, 0xa5, 0x10000, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0)={r2, 0x1, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x80000000, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r3}) socket$isdn(0x22, 0x3, 0x53b886f9362b76) 21:43:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:54 executing program 0: r0 = socket$kcm(0x29, 0x9, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x9, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6c50, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x33}, @map_fd={0x18, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0x21, 0x46, &(0x7f0000000440)=""/70, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0x1ff, 0x77}, 0x10}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', r2, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:54 executing program 5: socketpair(0xa, 0x0, 0xfffff800, 0x0) 21:43:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:55 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:55 executing program 0: r0 = socket$kcm(0x29, 0x9, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x9, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6c50, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x33}, @map_fd={0x18, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0x21, 0x46, &(0x7f0000000440)=""/70, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0x1ff, 0x77}, 0x10}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', r2, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:55 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x6, 0xcb) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) 21:43:55 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (fail_nth: 1) [ 1474.277962] FAULT_INJECTION: forcing a failure. [ 1474.277962] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.298366] CPU: 0 PID: 13153 Comm: syz-executor.2 Not tainted 4.14.262-syzkaller #0 [ 1474.306275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.315629] Call Trace: [ 1474.318228] dump_stack+0x1b2/0x281 [ 1474.321871] should_fail.cold+0x10a/0x149 [ 1474.326461] should_failslab+0xd6/0x130 [ 1474.330439] kmem_cache_alloc+0x28e/0x3c0 [ 1474.334587] ? sock_destroy_inode+0x60/0x60 [ 1474.338905] sock_alloc_inode+0x19/0x250 [ 1474.343049] ? sock_destroy_inode+0x60/0x60 [ 1474.347366] alloc_inode+0x5d/0x170 [ 1474.350994] new_inode_pseudo+0x14/0xe0 [ 1474.354967] sock_alloc+0x3c/0x270 [ 1474.358511] __sock_create+0x8a/0x620 [ 1474.362414] ? wait_for_completion_io+0x10/0x10 [ 1474.367081] SyS_socketpair+0xdf/0x480 [ 1474.370972] ? SyS_socket+0x1b0/0x1b0 [ 1474.374772] ? SyS_read+0x210/0x210 [ 1474.377968] FAULT_INJECTION: forcing a failure. [ 1474.377968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1474.378394] ? __do_page_fault+0x159/0xad0 [ 1474.378404] ? do_syscall_64+0x4c/0x640 [ 1474.378421] ? SyS_socket+0x1b0/0x1b0 [ 1474.378432] do_syscall_64+0x1d5/0x640 [ 1474.406161] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1474.411333] RIP: 0033:0x7f256a019fe9 [ 1474.415031] RSP: 002b:00007f256898f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 21:43:55 executing program 0: r0 = socket$kcm(0x29, 0x9, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', r2, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (fail_nth: 1) 21:43:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) [ 1474.422732] RAX: ffffffffffffffda RBX: 00007f256a12cf60 RCX: 00007f256a019fe9 [ 1474.429988] RDX: 00000000fffff800 RSI: 0000000000000000 RDI: 000000000000000a [ 1474.437416] RBP: 00007f256898f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.444674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.451931] R13: 00007fffb32b560f R14: 00007f256898f300 R15: 0000000000022000 [ 1474.459200] CPU: 1 PID: 13163 Comm: syz-executor.5 Not tainted 4.14.262-syzkaller #0 [ 1474.467085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.476436] Call Trace: [ 1474.479025] dump_stack+0x1b2/0x281 [ 1474.482652] should_fail.cold+0x10a/0x149 [ 1474.486810] __alloc_pages_nodemask+0x22c/0x2720 [ 1474.491561] ? ima_match_policy+0x833/0x10e0 [ 1474.495965] ? ima_rdwr_violation_check+0x1e4/0x3a0 [ 1474.500981] ? ima_restore_measurement_entry+0x40/0x40 [ 1474.506252] ? lock_acquire+0x170/0x3f0 [ 1474.510231] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1474.515079] ? __lock_acquire+0x5fc/0x3f20 [ 1474.519316] alloc_pages_current+0x155/0x260 [ 1474.523722] __pmd_alloc+0x37/0x3f0 21:43:55 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) [ 1474.527344] __handle_mm_fault+0x1398/0x4620 [ 1474.531753] ? vm_insert_page+0x7c0/0x7c0 [ 1474.535913] ? mark_held_locks+0xa6/0xf0 [ 1474.539977] handle_mm_fault+0x455/0x9c0 [ 1474.540334] socket: no more sockets [ 1474.544032] __do_page_fault+0x549/0xad0 [ 1474.544044] ? spurious_fault+0x640/0x640 [ 1474.544054] ? do_page_fault+0x60/0x500 [ 1474.544065] page_fault+0x25/0x50 [ 1474.544077] RIP: 0010:__put_user_4+0x1c/0x30 [ 1474.567636] RSP: 0018:ffff8880b440fcf8 EFLAGS: 00050297 21:43:55 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) [ 1474.572995] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1474.580345] RDX: 0000000000000045 RSI: ffffffff86103a6b RDI: 0000000000000286 [ 1474.587612] RBP: ffff88809001a200 R08: ffffffff8b9c7828 R09: 0000000000000000 [ 1474.594876] R10: 0000000000000000 R11: ffff8880af932140 R12: 0000000000000000 [ 1474.602141] R13: 0000000020000000 R14: ffff8880b0630180 R15: ffff888098700a00 [ 1474.609425] ? tcp_ioctl+0x25b/0x590 [ 1474.613155] tcp_ioctl+0x266/0x590 [ 1474.616692] ? tcp_poll+0xc90/0xc90 [ 1474.620317] inet_ioctl+0xd0/0x190 [ 1474.623862] sock_ioctl+0x2cc/0x4c0 21:43:55 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4002, 0x9, 0x40, 0x6}) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0x9}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) [ 1474.627513] ? sock_release+0x1e0/0x1e0 [ 1474.631570] do_vfs_ioctl+0x75a/0xff0 [ 1474.635368] ? lock_acquire+0x170/0x3f0 [ 1474.639338] ? ioctl_preallocate+0x1a0/0x1a0 [ 1474.643749] ? __fget+0x2df/0x460 [ 1474.647198] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.651165] ? security_file_ioctl+0x83/0xb0 [ 1474.655579] SyS_ioctl+0x7f/0xb0 [ 1474.658948] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.662929] do_syscall_64+0x1d5/0x640 [ 1474.666828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1474.672016] RIP: 0033:0x7f9e80cd4fe9 21:43:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:55 executing program 0: r0 = socket$kcm(0x29, 0x9, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (fail_nth: 2) 21:43:55 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (fail_nth: 2) [ 1474.675727] RSP: 002b:00007f9e7f64a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1474.683516] RAX: ffffffffffffffda RBX: 00007f9e80de7f60 RCX: 00007f9e80cd4fe9 [ 1474.690780] RDX: 0000000020000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 1474.698053] RBP: 00007f9e7f64a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.705320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.712588] R13: 00007ffc12b295af R14: 00007f9e7f64a300 R15: 0000000000022000 21:43:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:55 executing program 0: r0 = socket$kcm(0x29, 0x9, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) [ 1474.829147] FAULT_INJECTION: forcing a failure. [ 1474.829147] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.856371] FAULT_INJECTION: forcing a failure. [ 1474.856371] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.870134] CPU: 1 PID: 13189 Comm: syz-executor.5 Not tainted 4.14.262-syzkaller #0 [ 1474.878040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.887405] Call Trace: [ 1474.889999] dump_stack+0x1b2/0x281 [ 1474.893646] should_fail.cold+0x10a/0x149 [ 1474.897800] should_failslab+0xd6/0x130 [ 1474.901784] kmem_cache_alloc+0x28e/0x3c0 [ 1474.905940] __pmd_alloc+0xaf/0x3f0 [ 1474.909576] __handle_mm_fault+0x1398/0x4620 [ 1474.913987] ? vm_insert_page+0x7c0/0x7c0 [ 1474.918143] ? mark_held_locks+0xa6/0xf0 [ 1474.922203] handle_mm_fault+0x455/0x9c0 [ 1474.926258] __do_page_fault+0x549/0xad0 [ 1474.930307] ? spurious_fault+0x640/0x640 [ 1474.934449] ? do_page_fault+0x60/0x500 [ 1474.938567] page_fault+0x25/0x50 [ 1474.942016] RIP: 0010:__put_user_4+0x1c/0x30 [ 1474.946409] RSP: 0018:ffff88807cd3fcf8 EFLAGS: 00050297 [ 1474.951761] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1474.959026] RDX: 0000000000000045 RSI: ffffffff86103a6b RDI: 0000000000000286 [ 1474.966378] RBP: ffff88809001a200 R08: ffffffff8b9c7828 R09: 0000000000000000 [ 1474.973642] R10: 0000000000000000 R11: ffff8880ab546480 R12: 0000000000000000 [ 1474.980907] R13: 0000000020000000 R14: ffff8880b0630180 R15: ffff8880b439e840 [ 1474.988190] ? tcp_ioctl+0x25b/0x590 [ 1474.991918] tcp_ioctl+0x266/0x590 [ 1474.995465] ? tcp_poll+0xc90/0xc90 [ 1474.999092] inet_ioctl+0xd0/0x190 [ 1475.002631] sock_ioctl+0x2cc/0x4c0 [ 1475.006243] ? sock_release+0x1e0/0x1e0 [ 1475.010207] do_vfs_ioctl+0x75a/0xff0 [ 1475.014004] ? lock_acquire+0x170/0x3f0 [ 1475.017971] ? ioctl_preallocate+0x1a0/0x1a0 [ 1475.022388] ? __fget+0x2df/0x460 [ 1475.025863] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.029822] ? security_file_ioctl+0x83/0xb0 [ 1475.034223] SyS_ioctl+0x7f/0xb0 [ 1475.037578] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.041546] do_syscall_64+0x1d5/0x640 [ 1475.045433] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1475.050609] RIP: 0033:0x7f9e80cd4fe9 [ 1475.054308] RSP: 002b:00007f9e7f64a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1475.062016] RAX: ffffffffffffffda RBX: 00007f9e80de7f60 RCX: 00007f9e80cd4fe9 [ 1475.069287] RDX: 0000000020000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 1475.076552] RBP: 00007f9e7f64a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.083819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.091175] R13: 00007ffc12b295af R14: 00007f9e7f64a300 R15: 0000000000022000 [ 1475.100577] CPU: 0 PID: 13194 Comm: syz-executor.2 Not tainted 4.14.262-syzkaller #0 [ 1475.108477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.117831] Call Trace: [ 1475.120429] dump_stack+0x1b2/0x281 [ 1475.124071] should_fail.cold+0x10a/0x149 [ 1475.128333] should_failslab+0xd6/0x130 [ 1475.132315] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1475.137088] ? kmem_cache_alloc+0x35f/0x3c0 [ 1475.141414] sock_alloc_inode+0x5f/0x250 [ 1475.145476] ? sock_destroy_inode+0x60/0x60 [ 1475.149797] alloc_inode+0x5d/0x170 [ 1475.153421] new_inode_pseudo+0x14/0xe0 [ 1475.157397] sock_alloc+0x3c/0x270 [ 1475.160937] __sock_create+0x8a/0x620 [ 1475.164753] ? wait_for_completion_io+0x10/0x10 [ 1475.169424] SyS_socketpair+0xdf/0x480 [ 1475.173310] ? SyS_socket+0x1b0/0x1b0 [ 1475.177109] ? SyS_read+0x210/0x210 [ 1475.180739] ? __do_page_fault+0x159/0xad0 [ 1475.184975] ? do_syscall_64+0x4c/0x640 [ 1475.188958] ? SyS_socket+0x1b0/0x1b0 [ 1475.192764] do_syscall_64+0x1d5/0x640 [ 1475.196869] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1475.202057] RIP: 0033:0x7f256a019fe9 [ 1475.205763] RSP: 002b:00007f256898f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1475.213480] RAX: ffffffffffffffda RBX: 00007f256a12cf60 RCX: 00007f256a019fe9 [ 1475.220753] RDX: 00000000fffff800 RSI: 0000000000000000 RDI: 000000000000000a 21:43:56 executing program 0: r0 = socket$kcm(0x29, 0x9, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) [ 1475.228035] RBP: 00007f256898f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.235306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.242574] R13: 00007fffb32b560f R14: 00007f256898f300 R15: 0000000000022000 [ 1475.278593] socket: no more sockets 21:43:56 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) (async) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4002, 0x9, 0x40, 0x6}) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0x9}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) 21:43:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (fail_nth: 3) 21:43:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:56 executing program 0: r0 = socket$kcm(0x29, 0x9, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:56 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (fail_nth: 3) [ 1475.622085] FAULT_INJECTION: forcing a failure. [ 1475.622085] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.644876] CPU: 0 PID: 13219 Comm: syz-executor.5 Not tainted 4.14.262-syzkaller #0 [ 1475.652789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.662143] Call Trace: [ 1475.664739] dump_stack+0x1b2/0x281 [ 1475.668375] should_fail.cold+0x10a/0x149 [ 1475.672530] should_failslab+0xd6/0x130 [ 1475.676506] kmem_cache_alloc+0x28e/0x3c0 [ 1475.680657] __anon_vma_prepare+0x5d/0x4f0 [ 1475.684900] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 1475.690095] ? __lockdep_init_map+0x100/0x560 [ 1475.694595] ? prep_transhuge_page+0xa0/0xa0 [ 1475.699003] ? _raw_spin_unlock+0x29/0x40 [ 1475.703147] ? __pmd_alloc+0x27f/0x3f0 [ 1475.707036] __handle_mm_fault+0x2ac4/0x4620 [ 1475.711445] ? vm_insert_page+0x7c0/0x7c0 [ 1475.715602] ? mark_held_locks+0xa6/0xf0 [ 1475.719664] handle_mm_fault+0x455/0x9c0 [ 1475.723730] __do_page_fault+0x549/0xad0 [ 1475.727807] ? spurious_fault+0x640/0x640 [ 1475.732045] ? do_page_fault+0x60/0x500 [ 1475.736026] page_fault+0x25/0x50 [ 1475.739485] RIP: 0010:__put_user_4+0x1c/0x30 [ 1475.743890] RSP: 0018:ffff88809ff3fcf8 EFLAGS: 00050297 [ 1475.749252] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1475.756537] RDX: 0000000000000045 RSI: ffffffff86103a6b RDI: 0000000000000286 [ 1475.763824] RBP: ffff88808ed12e00 R08: ffffffff8b9c7828 R09: 0000000000000000 [ 1475.771094] R10: 0000000000000000 R11: ffff88807bb04680 R12: 0000000000000000 [ 1475.778365] R13: 0000000020000000 R14: ffff8880b0630180 R15: ffff88809e7b9780 [ 1475.785646] ? tcp_ioctl+0x25b/0x590 [ 1475.789364] tcp_ioctl+0x266/0x590 [ 1475.792904] ? tcp_poll+0xc90/0xc90 [ 1475.796529] inet_ioctl+0xd0/0x190 [ 1475.800157] sock_ioctl+0x2cc/0x4c0 [ 1475.803780] ? sock_release+0x1e0/0x1e0 [ 1475.807755] do_vfs_ioctl+0x75a/0xff0 [ 1475.811557] ? lock_acquire+0x170/0x3f0 [ 1475.815525] ? ioctl_preallocate+0x1a0/0x1a0 [ 1475.819935] ? __fget+0x2df/0x460 [ 1475.823388] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.827366] ? security_file_ioctl+0x83/0xb0 [ 1475.831775] SyS_ioctl+0x7f/0xb0 [ 1475.835142] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.839127] do_syscall_64+0x1d5/0x640 [ 1475.843046] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1475.848324] RIP: 0033:0x7f9e80cd4fe9 [ 1475.852034] RSP: 002b:00007f9e7f64a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1475.859747] RAX: ffffffffffffffda RBX: 00007f9e80de7f60 RCX: 00007f9e80cd4fe9 21:43:56 executing program 0: socket$kcm(0x29, 0x9, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) [ 1475.867016] RDX: 0000000020000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 1475.874282] RBP: 00007f9e7f64a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.881547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.888820] R13: 00007ffc12b295af R14: 00007f9e7f64a300 R15: 0000000000022000 21:43:57 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4002, 0x9, 0x40, 0x6}) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0x9}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) (async) getsockname$ax25(r0, 0x0, &(0x7f0000000200)) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) (async) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4002, 0x9, 0x40, 0x6}) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0x9}, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) (async) 21:43:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:57 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:57 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 21:43:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (fail_nth: 4) 21:43:57 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:43:57 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 21:43:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) [ 1476.609722] FAULT_INJECTION: forcing a failure. [ 1476.609722] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.645695] CPU: 0 PID: 13256 Comm: syz-executor.5 Not tainted 4.14.262-syzkaller #0 21:43:57 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) [ 1476.653618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.662973] Call Trace: [ 1476.665565] dump_stack+0x1b2/0x281 [ 1476.669197] should_fail.cold+0x10a/0x149 [ 1476.673351] should_failslab+0xd6/0x130 [ 1476.677339] kmem_cache_alloc+0x28e/0x3c0 [ 1476.681495] __anon_vma_prepare+0x2bc/0x4f0 [ 1476.685825] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 1476.690932] ? __lockdep_init_map+0x100/0x560 [ 1476.695427] ? prep_transhuge_page+0xa0/0xa0 [ 1476.699833] ? _raw_spin_unlock+0x29/0x40 [ 1476.703978] ? __pmd_alloc+0x27f/0x3f0 21:43:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) [ 1476.707953] __handle_mm_fault+0x2ac4/0x4620 [ 1476.712367] ? vm_insert_page+0x7c0/0x7c0 [ 1476.716531] ? mark_held_locks+0xa6/0xf0 [ 1476.720856] handle_mm_fault+0x455/0x9c0 [ 1476.724922] __do_page_fault+0x549/0xad0 [ 1476.728987] ? spurious_fault+0x640/0x640 [ 1476.733137] ? do_page_fault+0x60/0x500 [ 1476.737115] page_fault+0x25/0x50 [ 1476.740564] RIP: 0010:__put_user_4+0x1c/0x30 [ 1476.744959] RSP: 0018:ffff8880954c7cf8 EFLAGS: 00050297 [ 1476.750323] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1476.757586] RDX: 0000000000000045 RSI: ffffffff86103a6b RDI: 0000000000000286 [ 1476.764853] RBP: ffff88808ed12e00 R08: ffffffff8b9c7828 R09: 0000000000000000 [ 1476.772122] R10: 0000000000000000 R11: ffff8880a23d2280 R12: 0000000000000000 [ 1476.779391] R13: 0000000020000000 R14: ffff8880b0630180 R15: ffff88809c55b500 [ 1476.786675] ? tcp_ioctl+0x25b/0x590 [ 1476.790397] tcp_ioctl+0x266/0x590 [ 1476.793941] ? tcp_poll+0xc90/0xc90 [ 1476.797569] inet_ioctl+0xd0/0x190 [ 1476.801110] sock_ioctl+0x2cc/0x4c0 [ 1476.804730] ? sock_release+0x1e0/0x1e0 [ 1476.808701] do_vfs_ioctl+0x75a/0xff0 [ 1476.812504] ? lock_acquire+0x170/0x3f0 [ 1476.816478] ? ioctl_preallocate+0x1a0/0x1a0 [ 1476.820896] ? __fget+0x2df/0x460 [ 1476.824351] ? do_vfs_ioctl+0xff0/0xff0 [ 1476.828316] ? security_file_ioctl+0x83/0xb0 [ 1476.832703] SyS_ioctl+0x7f/0xb0 [ 1476.836047] ? do_vfs_ioctl+0xff0/0xff0 [ 1476.840002] do_syscall_64+0x1d5/0x640 [ 1476.843877] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1476.849072] RIP: 0033:0x7f9e80cd4fe9 [ 1476.852768] RSP: 002b:00007f9e7f64a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:43:57 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x36}, {0x0, 0xfffffffffffffe15}, {0x0}], 0x9}, 0x8061) 21:43:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:43:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 21:43:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:57 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) [ 1476.860467] RAX: ffffffffffffffda RBX: 00007f9e80de7f60 RCX: 00007f9e80cd4fe9 [ 1476.867716] RDX: 0000000020000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 1476.874963] RBP: 00007f9e7f64a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.882212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.889645] R13: 00007ffc12b295af R14: 00007f9e7f64a300 R15: 0000000000022000 21:43:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (fail_nth: 5) 21:43:57 executing program 2: socketpair(0x1d, 0x0, 0x9, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2445a2031efd95f0, 0x8000, 0x0, 0x800}) 21:43:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 21:43:57 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x36}, {0x0, 0xfffffffffffffe15}, {0x0}], 0x9}, 0x8061) 21:43:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 21:43:58 executing program 2: socketpair(0x1d, 0x0, 0x9, 0x0) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2445a2031efd95f0, 0x8000, 0x0, 0x800}) 21:43:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:58 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x36}, {0x0, 0xfffffffffffffe15}, {0x0}], 0x9}, 0x8061) [ 1477.127259] FAULT_INJECTION: forcing a failure. [ 1477.127259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1477.189773] CPU: 0 PID: 13313 Comm: syz-executor.5 Not tainted 4.14.262-syzkaller #0 [ 1477.197717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.207071] Call Trace: [ 1477.209704] dump_stack+0x1b2/0x281 [ 1477.213338] should_fail.cold+0x10a/0x149 [ 1477.217500] __alloc_pages_nodemask+0x22c/0x2720 [ 1477.222255] ? SyS_ioctl+0x7f/0xb0 [ 1477.225796] ? do_syscall_64+0x1d5/0x640 [ 1477.229870] ? trace_hardirqs_on+0x10/0x10 [ 1477.234105] ? do_syscall_64+0x1d5/0x640 21:43:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) [ 1477.238171] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1477.243013] ? trace_hardirqs_on+0x10/0x10 [ 1477.247251] ? __anon_vma_prepare+0x28f/0x4f0 [ 1477.251750] ? lock_acquire+0x170/0x3f0 [ 1477.255725] ? lock_downgrade+0x740/0x740 [ 1477.259880] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 1477.265329] alloc_pages_vma+0x4b3/0x6d0 [ 1477.269394] do_huge_pmd_anonymous_page+0x2d6/0x1700 [ 1477.274500] ? __lockdep_init_map+0x100/0x560 [ 1477.279007] ? prep_transhuge_page+0xa0/0xa0 [ 1477.283415] ? _raw_spin_unlock+0x29/0x40 [ 1477.287563] ? __pmd_alloc+0x27f/0x3f0 [ 1477.291457] __handle_mm_fault+0x2ac4/0x4620 [ 1477.295881] ? vm_insert_page+0x7c0/0x7c0 [ 1477.300042] ? mark_held_locks+0xa6/0xf0 [ 1477.304110] handle_mm_fault+0x455/0x9c0 [ 1477.308178] __do_page_fault+0x549/0xad0 [ 1477.312254] ? spurious_fault+0x640/0x640 [ 1477.316443] ? do_page_fault+0x60/0x500 [ 1477.320421] page_fault+0x25/0x50 [ 1477.323876] RIP: 0010:__put_user_4+0x1c/0x30 [ 1477.328272] RSP: 0018:ffff88807a687cf8 EFLAGS: 00050297 [ 1477.333716] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1477.341099] RDX: 0000000000000045 RSI: ffffffff86103a6b RDI: 0000000000000286 [ 1477.348483] RBP: ffff88809b390200 R08: ffffffff8b9c7828 R09: 0000000000000000 [ 1477.355830] R10: 0000000000000000 R11: ffff888096cbe6c0 R12: 0000000000000000 [ 1477.363191] R13: 0000000020000000 R14: ffff8880b0630180 R15: ffff88809af00540 [ 1477.370458] ? tcp_ioctl+0x25b/0x590 [ 1477.374258] tcp_ioctl+0x266/0x590 [ 1477.377782] ? tcp_poll+0xc90/0xc90 [ 1477.381393] inet_ioctl+0xd0/0x190 [ 1477.384917] sock_ioctl+0x2cc/0x4c0 [ 1477.388539] ? sock_release+0x1e0/0x1e0 [ 1477.392501] do_vfs_ioctl+0x75a/0xff0 [ 1477.396374] ? lock_acquire+0x170/0x3f0 [ 1477.400329] ? ioctl_preallocate+0x1a0/0x1a0 [ 1477.404721] ? __fget+0x2df/0x460 [ 1477.408163] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.412124] ? security_file_ioctl+0x83/0xb0 [ 1477.416513] SyS_ioctl+0x7f/0xb0 [ 1477.419883] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.423841] do_syscall_64+0x1d5/0x640 [ 1477.427734] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1477.432904] RIP: 0033:0x7f9e80cd4fe9 21:43:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (fail_nth: 6) 21:43:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) 21:43:58 executing program 2: socketpair(0x1d, 0x0, 0x9, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2445a2031efd95f0, 0x8000, 0x0, 0x800}) 21:43:58 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900), 0x2101) 21:43:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) [ 1477.436594] RSP: 002b:00007f9e7f64a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.444456] RAX: ffffffffffffffda RBX: 00007f9e80de7f60 RCX: 00007f9e80cd4fe9 [ 1477.451710] RDX: 0000000020000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 1477.458964] RBP: 00007f9e7f64a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1477.466212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.473461] R13: 00007ffc12b295af R14: 00007f9e7f64a300 R15: 0000000000022000 21:43:58 executing program 2: socketpair(0xa, 0x80000, 0xffff, 0x0) 21:43:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)={r1}) 21:43:58 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900), 0x2101) 21:43:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) [ 1477.610156] FAULT_INJECTION: forcing a failure. [ 1477.610156] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1477.646393] CPU: 1 PID: 13345 Comm: syz-executor.5 Not tainted 4.14.262-syzkaller #0 [ 1477.654308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.663658] Call Trace: [ 1477.666246] dump_stack+0x1b2/0x281 [ 1477.669879] should_fail.cold+0x10a/0x149 [ 1477.674032] __alloc_pages_nodemask+0x22c/0x2720 [ 1477.678787] ? SyS_ioctl+0x7f/0xb0 [ 1477.682331] ? do_syscall_64+0x1d5/0x640 [ 1477.686391] ? trace_hardirqs_on+0x10/0x10 [ 1477.690625] ? trace_hardirqs_on+0x10/0x10 [ 1477.694863] ? do_syscall_64+0x1d5/0x640 [ 1477.698925] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1477.703770] ? get_mem_cgroup_from_mm+0xf5/0x360 21:43:58 executing program 2: socketpair(0xa, 0x80000, 0xffff, 0x0) 21:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) [ 1477.708527] ? refill_stock+0x260/0x260 [ 1477.712503] ? lock_downgrade+0x740/0x740 [ 1477.716655] ? get_mem_cgroup_from_mm+0x112/0x360 [ 1477.721499] alloc_pages_current+0x155/0x260 [ 1477.725913] ? mem_cgroup_try_charge+0x2db/0x840 [ 1477.730671] pte_alloc_one+0x15/0x100 [ 1477.734474] do_huge_pmd_anonymous_page+0x8fc/0x1700 [ 1477.739579] ? prep_transhuge_page+0xa0/0xa0 [ 1477.743988] ? _raw_spin_unlock+0x29/0x40 [ 1477.748132] ? __pmd_alloc+0x27f/0x3f0 [ 1477.752023] __handle_mm_fault+0x2ac4/0x4620 [ 1477.756441] ? vm_insert_page+0x7c0/0x7c0 [ 1477.760604] ? mark_held_locks+0xa6/0xf0 [ 1477.764668] handle_mm_fault+0x455/0x9c0 [ 1477.768732] __do_page_fault+0x549/0xad0 [ 1477.772796] ? spurious_fault+0x640/0x640 [ 1477.776947] ? do_page_fault+0x60/0x500 [ 1477.780926] page_fault+0x25/0x50 [ 1477.784380] RIP: 0010:__put_user_4+0x1c/0x30 [ 1477.788784] RSP: 0018:ffff8880b3a27cf8 EFLAGS: 00050297 [ 1477.794142] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1477.801405] RDX: 0000000000000045 RSI: ffffffff86103a6b RDI: 0000000000000286 [ 1477.808690] RBP: ffff88809b390200 R08: ffffffff8b9c7828 R09: 0000000000000000 [ 1477.816130] R10: 0000000000000000 R11: ffff88807b0ec280 R12: 0000000000000000 [ 1477.823396] R13: 0000000020000000 R14: ffff8880b0630180 R15: ffff8880b3abe7c0 [ 1477.830688] ? tcp_ioctl+0x25b/0x590 [ 1477.834407] tcp_ioctl+0x266/0x590 [ 1477.837955] ? tcp_poll+0xc90/0xc90 [ 1477.841584] inet_ioctl+0xd0/0x190 [ 1477.845124] sock_ioctl+0x2cc/0x4c0 [ 1477.848752] ? sock_release+0x1e0/0x1e0 [ 1477.852723] do_vfs_ioctl+0x75a/0xff0 [ 1477.856521] ? lock_acquire+0x170/0x3f0 [ 1477.860495] ? ioctl_preallocate+0x1a0/0x1a0 [ 1477.864910] ? __fget+0x2df/0x460 [ 1477.868366] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.872342] ? security_file_ioctl+0x83/0xb0 [ 1477.876749] SyS_ioctl+0x7f/0xb0 [ 1477.880111] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.884092] do_syscall_64+0x1d5/0x640 [ 1477.887976] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1477.893258] RIP: 0033:0x7f9e80cd4fe9 [ 1477.897066] RSP: 002b:00007f9e7f64a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:43:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (fail_nth: 7) 21:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) 21:43:58 executing program 2: socketpair(0xa, 0x80000, 0xffff, 0x0) 21:43:58 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900), 0x2101) 21:43:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) [ 1477.905074] RAX: ffffffffffffffda RBX: 00007f9e80de7f60 RCX: 00007f9e80cd4fe9 [ 1477.912331] RDX: 0000000020000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 1477.919590] RBP: 00007f9e7f64a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1477.926845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.934139] R13: 00007ffc12b295af R14: 00007f9e7f64a300 R15: 0000000000022000 21:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:43:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x1f, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:58 executing program 2: socketpair(0x15, 0x4, 0x1, 0x0) 21:43:59 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x40) [ 1478.058317] FAULT_INJECTION: forcing a failure. [ 1478.058317] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.134257] CPU: 0 PID: 13381 Comm: syz-executor.5 Not tainted 4.14.262-syzkaller #0 [ 1478.142261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.151642] Call Trace: [ 1478.154238] dump_stack+0x1b2/0x281 [ 1478.157871] should_fail.cold+0x10a/0x149 [ 1478.162033] should_failslab+0xd6/0x130 [ 1478.166009] kmem_cache_alloc+0x28e/0x3c0 [ 1478.170155] ptlock_alloc+0x1d/0x70 [ 1478.173786] pte_alloc_one+0x57/0x100 [ 1478.177591] do_huge_pmd_anonymous_page+0x8fc/0x1700 [ 1478.182696] ? prep_transhuge_page+0xa0/0xa0 [ 1478.187098] ? _raw_spin_unlock+0x29/0x40 [ 1478.191242] ? __pmd_alloc+0x27f/0x3f0 [ 1478.195128] __handle_mm_fault+0x2ac4/0x4620 [ 1478.199537] ? vm_insert_page+0x7c0/0x7c0 [ 1478.203698] ? mark_held_locks+0xa6/0xf0 [ 1478.207762] handle_mm_fault+0x455/0x9c0 [ 1478.211827] __do_page_fault+0x549/0xad0 [ 1478.215890] ? spurious_fault+0x640/0x640 [ 1478.220035] ? do_page_fault+0x60/0x500 [ 1478.224091] page_fault+0x25/0x50 [ 1478.227537] RIP: 0010:__put_user_4+0x1c/0x30 [ 1478.231923] RSP: 0018:ffff8880a059fcf8 EFLAGS: 00050297 [ 1478.237392] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1478.244644] RDX: 0000000000000045 RSI: ffffffff86103a6b RDI: 0000000000000286 [ 1478.251893] RBP: ffff88808ed12340 R08: ffffffff8b9c7828 R09: 0000000000000000 [ 1478.259149] R10: 0000000000000000 R11: ffff88809852c540 R12: 0000000000000000 [ 1478.266428] R13: 0000000020000000 R14: ffff8880b0630180 R15: ffff8880b3a3c540 [ 1478.273744] ? tcp_ioctl+0x25b/0x590 [ 1478.277442] tcp_ioctl+0x266/0x590 [ 1478.280962] ? tcp_poll+0xc90/0xc90 [ 1478.284570] inet_ioctl+0xd0/0x190 [ 1478.288181] sock_ioctl+0x2cc/0x4c0 [ 1478.291881] ? sock_release+0x1e0/0x1e0 [ 1478.295842] do_vfs_ioctl+0x75a/0xff0 [ 1478.299621] ? lock_acquire+0x170/0x3f0 [ 1478.303698] ? ioctl_preallocate+0x1a0/0x1a0 [ 1478.308089] ? __fget+0x2df/0x460 [ 1478.311579] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.315549] ? security_file_ioctl+0x83/0xb0 [ 1478.319999] SyS_ioctl+0x7f/0xb0 [ 1478.323343] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.327296] do_syscall_64+0x1d5/0x640 21:43:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (fail_nth: 8) 21:43:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:43:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x200, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:59 executing program 2: socketpair(0x15, 0x4, 0x1, 0x0) [ 1478.331167] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1478.336335] RIP: 0033:0x7f9e80cd4fe9 [ 1478.340040] RSP: 002b:00007f9e7f64a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1478.347743] RAX: ffffffffffffffda RBX: 00007f9e80de7f60 RCX: 00007f9e80cd4fe9 [ 1478.354995] RDX: 0000000020000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 1478.362264] RBP: 00007f9e7f64a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1478.369516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1478.376783] R13: 00007ffc12b295af R14: 00007f9e7f64a300 R15: 0000000000022000 21:43:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:59 executing program 2: socketpair(0x15, 0x4, 0x1, 0x0) socketpair(0x15, 0x4, 0x1, 0x0) (async) 21:43:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:59 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "584ae26abd12603e", "0bc45dfad35d0c0100cb6e195ad6b65970197c5e393f7fd658180ef8986ab5f6", '\x00', "43d975802c233648"}, 0x38) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:43:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:59 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x40) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x40) (async) 21:43:59 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@bcast, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 21:43:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:43:59 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "584ae26abd12603e", "0bc45dfad35d0c0100cb6e195ad6b65970197c5e393f7fd658180ef8986ab5f6", '\x00', "43d975802c233648"}, 0x38) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "584ae26abd12603e", "0bc45dfad35d0c0100cb6e195ad6b65970197c5e393f7fd658180ef8986ab5f6", '\x00', "43d975802c233648"}, 0x38) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) 21:43:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, 0x47a0, 0x7800, 0x0, 0x8}}) 21:43:59 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)) 21:44:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, 0x0, 0x7800, 0x0, 0x8}}) 21:44:00 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "584ae26abd12603e", "0bc45dfad35d0c0100cb6e195ad6b65970197c5e393f7fd658180ef8986ab5f6", '\x00', "43d975802c233648"}, 0x38) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "584ae26abd12603e", "0bc45dfad35d0c0100cb6e195ad6b65970197c5e393f7fd658180ef8986ab5f6", '\x00', "43d975802c233648"}, 0x38) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) 21:44:00 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@bcast, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 21:44:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:44:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, 0x0, 0x7800, 0x0, 0x8}}) 21:44:00 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)) 21:44:00 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x40) 21:44:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r5, &(0x7f0000000700)={{0x3, @rose}, [@rose, @default, @null, @default, @null, @remote, @bcast, @rose]}, &(0x7f0000000380)=0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) 21:44:00 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@bcast, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@bcast, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) 21:44:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) (fail_nth: 1) 21:44:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, 0x0, 0x7800, 0x0, 0x8}}) 21:44:00 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)) 21:44:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, 0x47a0, 0x0, 0x0, 0x8}}) 21:44:00 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:01 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x20004004) 21:44:01 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x20004004) socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}]}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x20004004) (async) 21:44:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:44:01 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) [ 1480.187179] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:44:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, 0x47a0, 0x0, 0x0, 0x8}}) 21:44:01 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @remote, @bcast, @bcast, @rose, @bcast, @bcast, @rose]}, &(0x7f0000000080)=0x48) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:44:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:44:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) (async) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) (async) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) (async) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockname$ax25(r5, &(0x7f0000000700)={{0x3, @rose}, [@rose, @default, @null, @default, @null, @remote, @bcast, @rose]}, &(0x7f0000000380)=0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) 21:44:01 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:01 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x20004004) socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}]}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x20004004) (async) 21:44:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, 0x47a0, 0x0, 0x0, 0x8}}) 21:44:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r5, &(0x7f0000000700)={{0x3, @rose}, [@rose, @default, @null, @default, @null, @remote, @bcast, @rose]}, &(0x7f0000000380)=0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)) (async) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) (async) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) (async) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x15) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) (async) socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) (async) getsockname$ax25(r5, &(0x7f0000000700)={{0x3, @rose}, [@rose, @default, @null, @default, @null, @remote, @bcast, @rose]}, &(0x7f0000000380)=0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) (async) 21:44:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) [ 1481.030143] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:44:01 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 21:44:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, 0x47a0, 0x7800}}) 21:44:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x6, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x6, 0x100, 0x2, 0x4, 0xb859}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r2}) 21:44:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) [ 1481.130418] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 21:44:02 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @remote, @bcast, @bcast, @rose, @bcast, @bcast, @rose]}, &(0x7f0000000080)=0x48) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:44:02 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) 21:44:02 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 21:44:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r5, &(0x7f0000000700)={{0x3, @rose}, [@rose, @default, @null, @default, @null, @remote, @bcast, @rose]}, &(0x7f0000000380)=0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) 21:44:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x6, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x6, 0x100, 0x2, 0x4, 0xb859}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r2}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x6, 0x1}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x6, 0x100, 0x2, 0x4, 0xb859}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r2}) (async) 21:44:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:02 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) (async, rerun: 32) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) (rerun: 32) 21:44:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r5, &(0x7f0000000700)={{0x3, @rose}, [@rose, @default, @null, @default, @null, @remote, @bcast, @rose]}, &(0x7f0000000380)=0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) [ 1481.964033] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:44:02 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 21:44:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x6, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x6, 0x100, 0x2, 0x4, 0xb859}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r2}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x6, 0x1}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x6, 0x100, 0x2, 0x4, 0xb859}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r2}) (async) 21:44:02 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) [ 1482.130439] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:44:03 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @remote, @bcast, @bcast, @rose, @bcast, @bcast, @rose]}, &(0x7f0000000080)=0x48) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) 21:44:03 executing program 2: socketpair(0x25, 0x6, 0xfffff800, 0x0) 21:44:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc4400) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000080)) 21:44:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r5, &(0x7f0000000700)={{0x3, @rose}, [@rose, @default, @null, @default, @null, @remote, @bcast, @rose]}, &(0x7f0000000380)=0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) 21:44:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) 21:44:03 executing program 2: socketpair(0x25, 0x6, 0xfffff800, 0x0) socketpair(0x25, 0x6, 0xfffff800, 0x0) (async) 21:44:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc4400) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000080)) 21:44:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r5, &(0x7f0000000700)={{0x3, @rose}, [@rose, @default, @null, @default, @null, @remote, @bcast, @rose]}, &(0x7f0000000380)=0x48) socket$nl_generic(0x10, 0x3, 0x10) [ 1482.960536] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:44:03 executing program 2: socketpair(0x25, 0x6, 0xfffff800, 0x0) [ 1483.107222] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:44:04 executing program 4: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004011) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000200)=@rose={'rose', 0x0}, 0x10) 21:44:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "1190f46e2e1b42a6", "537e9741e4c1ca21535aaed48c9300b1", "5e299884", "9b0292c90d1eb6e3"}, 0x28) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) 21:44:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc4400) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xc4400) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000080)) (async) 21:44:04 executing program 2: socketpair(0x29, 0x4, 0x1, 0x0) 21:44:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) getsockname$ax25(r5, &(0x7f0000000700)={{0x3, @rose}, [@rose, @default, @null, @default, @null, @remote, @bcast, @rose]}, &(0x7f0000000380)=0x48) 21:44:04 executing program 2: socketpair(0x29, 0x4, 0x1, 0x0) socketpair(0x29, 0x4, 0x1, 0x0) (async) 21:44:04 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 21:44:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null]}, 0x48) 21:44:04 executing program 2: socketpair(0x29, 0x4, 0x1, 0x0) socketpair(0x29, 0x4, 0x1, 0x0) (async) 21:44:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) [ 1483.892938] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:44:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x56b, 0x1, 0xe93d}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r1}) [ 1484.044987] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 21:44:05 executing program 4: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004011) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000200)=@rose={'rose', 0x0}, 0x10) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004011) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000200)=@rose={'rose', 0x0}, 0x10) (async) 21:44:05 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 21:44:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x56b, 0x1, 0xe93d}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r1}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x56b, 0x1, 0xe93d}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r1}) (async) 21:44:05 executing program 2: socketpair(0xa, 0x1, 0xfffff800, 0x0) 21:44:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 21:44:05 executing program 2: socketpair(0xa, 0x1, 0xfffff800, 0x0) 21:44:05 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) (async) 21:44:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000f9", @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf25790000000400f400"], 0x18}}, 0x0) 21:44:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x56b, 0x1, 0xe93d}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r1}) 21:44:05 executing program 2: socketpair(0xa, 0x1, 0xfffff800, 0x0) 21:44:06 executing program 4: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004011) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000200)=@rose={'rose', 0x0}, 0x10) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004011) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x11}, {0x0}, {0x0}], 0x9}, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000200)=@rose={'rose', 0x0}, 0x10) (async) 21:44:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0cb15f46b7a6f2b1", "8ed1a3c6a37760291517011aeef5ab52542252be9d51d0ceab1d2629da11e40a", "aa3b1d49", "5e921edfbf4cade2"}, 0x38) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "806f10e1a72ffd2b", "7a348b29536c92d6ec88550d6a3c8dfe", "3028a220", "ea3b11b0b24292d4"}, 0x28) 21:44:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) socket$netlink(0x10, 0x3, 0xfe0f012e7fca7a94) 21:44:06 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x11aa2082e3e08b73, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x400c080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:44:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x1f, 0x9f83, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:44:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1, &(0x7f0000000500)=""/169, 0xa9}, 0x2000) 21:44:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x1f, 0x9f83, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x1f, 0x9f83, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) (async) 21:44:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0cb15f46b7a6f2b1", "8ed1a3c6a37760291517011aeef5ab52542252be9d51d0ceab1d2629da11e40a", "aa3b1d49", "5e921edfbf4cade2"}, 0x38) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "806f10e1a72ffd2b", "7a348b29536c92d6ec88550d6a3c8dfe", "3028a220", "ea3b11b0b24292d4"}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0cb15f46b7a6f2b1", "8ed1a3c6a37760291517011aeef5ab52542252be9d51d0ceab1d2629da11e40a", "aa3b1d49", "5e921edfbf4cade2"}, 0x38) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "806f10e1a72ffd2b", "7a348b29536c92d6ec88550d6a3c8dfe", "3028a220", "ea3b11b0b24292d4"}, 0x28) (async) 21:44:06 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x11aa2082e3e08b73, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x400c080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:44:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:07 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2020) 21:44:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21:44:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0cb15f46b7a6f2b1", "8ed1a3c6a37760291517011aeef5ab52542252be9d51d0ceab1d2629da11e40a", "aa3b1d49", "5e921edfbf4cade2"}, 0x38) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "806f10e1a72ffd2b", "7a348b29536c92d6ec88550d6a3c8dfe", "3028a220", "ea3b11b0b24292d4"}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0cb15f46b7a6f2b1", "8ed1a3c6a37760291517011aeef5ab52542252be9d51d0ceab1d2629da11e40a", "aa3b1d49", "5e921edfbf4cade2"}, 0x38) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "806f10e1a72ffd2b", "7a348b29536c92d6ec88550d6a3c8dfe", "3028a220", "ea3b11b0b24292d4"}, 0x28) (async) 21:44:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x1f, 0x9f83, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) 21:44:07 executing program 2: socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x0, 0x11aa2082e3e08b73, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x400c080) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:44:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) 21:44:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x4, 0x8, 0x10001, 0x800}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:07 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000002c8, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000001d, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380), 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x12, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000000)=@raw=[@alu={0x6bc37b97908f046d, 0x1, 0x0, 0x9, 0x5, 0x8, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6f9}, @map_fd={0x18, 0x3}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xa, '\x00', r0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x3ff, 0x3}, 0x10, 0x1aae9, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1]}, 0x80) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000280)={r6}) 21:44:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)) 21:44:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) 21:44:07 executing program 2: socketpair(0x1, 0x0, 0xfffff800, 0x0) 21:44:08 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2020) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2020) (async) 21:44:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x4, 0x8, 0x10001, 0x800}) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)) 21:44:08 executing program 2: socketpair(0x1, 0x0, 0xfffff800, 0x0) 21:44:08 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000002c8, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000001d, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380), 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x12, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000000)=@raw=[@alu={0x6bc37b97908f046d, 0x1, 0x0, 0x9, 0x5, 0x8, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6f9}, @map_fd={0x18, 0x3}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xa, '\x00', r0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x3ff, 0x3}, 0x10, 0x1aae9, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1]}, 0x80) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000280)={r6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000002c8, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000001d, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380), 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x12, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000000)=@raw=[@alu={0x6bc37b97908f046d, 0x1, 0x0, 0x9, 0x5, 0x8, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6f9}, @map_fd={0x18, 0x3}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xa, '\x00', r0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x3ff, 0x3}, 0x10, 0x1aae9, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1]}, 0x80) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000280)={r6}) (async) 21:44:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) 21:44:08 executing program 2: socketpair(0x1, 0x0, 0xfffff800, 0x0) socketpair(0x1, 0x0, 0xfffff800, 0x0) (async) 21:44:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000280)) 21:44:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x4, 0x8, 0x10001, 0x800}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x4, 0x8, 0x10001, 0x800}) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) 21:44:08 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000002c8, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000001d, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380), 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x12, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r1}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000fc0)=[0x1, r4]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000000)=@raw=[@alu={0x6bc37b97908f046d, 0x1, 0x0, 0x9, 0x5, 0x8, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6f9}, @map_fd={0x18, 0x3}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xa, '\x00', r0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x3ff, 0x3}, 0x10, 0x1aae9, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1]}, 0x80) (async) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000280)={r6}) 21:44:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:08 executing program 2: socketpair(0xa, 0x0, 0xfffff802, 0x0) 21:44:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:44:09 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2020) 21:44:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0xc}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000040)="72017a72d98d2e69be6775ef6a5450ee262952fdd05f6137d85926056a09b31d24db9f2d9a0a0b0456200a8f04a59b5949a8a47d5425a7748b5afe35a06c5553df000e1de21c57ddb12c32861360f34f85dfcd67", &(0x7f00000000c0)=""/126, &(0x7f0000000140)="a0d9a2e97d5683a5a55687a896db32303c75232d27eb9a40a7b2319245ce02368789720d05de0b69a8ec1795d09353097c7899349cebdfe0e86837ea183f4cab3fd47832344d8b10", &(0x7f00000001c0)="705419241d2259db7a21e5ec3c259d953e7103380a1a927194e08fa43de5c108bf8f28570c85a3ca25d56fb9c01e0b619552fa481df1556faabaf6f269f69af19e134b0dfa6486a3f3795a231d1364dd7a65f89178ea9c0f31b8d114c3db3519e68bf6a02e63db126e6aeec07cfd38f24281dd6578e9e9cb5174444b81fe79863b846d8adbe5ef2da255fd8aaadca2bfce5e72e81fd8ac", 0xd6e, r1}, 0x38) 21:44:09 executing program 3: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x4, 0x0, 0x1000}) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x7f, 0x440200) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000002c0)={0x2, 0x3f, 0x7, 0x6}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x5, 0x3ff, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000004c0)={r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000340)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0}]}) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x606, 0x200000) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f0000000400)={r5, 0x1}) 21:44:09 executing program 2: socketpair(0xa, 0x0, 0xfffff802, 0x0) 21:44:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:44:09 executing program 2: socketpair(0xa, 0x0, 0xfffff802, 0x0) 21:44:09 executing program 3: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x4, 0x0, 0x1000}) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x7f, 0x440200) (rerun: 64) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000002c0)={0x2, 0x3f, 0x7, 0x6}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x5, 0x3ff, 0x0, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000004c0)={r4}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/14) (rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0}]}) (async) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x606, 0x200000) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f0000000400)={r5, 0x1}) 21:44:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21:44:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0xc}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000040)="72017a72d98d2e69be6775ef6a5450ee262952fdd05f6137d85926056a09b31d24db9f2d9a0a0b0456200a8f04a59b5949a8a47d5425a7748b5afe35a06c5553df000e1de21c57ddb12c32861360f34f85dfcd67", &(0x7f00000000c0)=""/126, &(0x7f0000000140)="a0d9a2e97d5683a5a55687a896db32303c75232d27eb9a40a7b2319245ce02368789720d05de0b69a8ec1795d09353097c7899349cebdfe0e86837ea183f4cab3fd47832344d8b10", &(0x7f00000001c0)="705419241d2259db7a21e5ec3c259d953e7103380a1a927194e08fa43de5c108bf8f28570c85a3ca25d56fb9c01e0b619552fa481df1556faabaf6f269f69af19e134b0dfa6486a3f3795a231d1364dd7a65f89178ea9c0f31b8d114c3db3519e68bf6a02e63db126e6aeec07cfd38f24281dd6578e9e9cb5174444b81fe79863b846d8adbe5ef2da255fd8aaadca2bfce5e72e81fd8ac", 0xd6e, r1}, 0x38) 21:44:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa225}}, 0x0, 0x0, 0x44, 0x0, "2336733ee6462e27fd77eeac3fb313a59aa33aff77b6ee7709081af69a81a10a9fc5e060cf6acbe89891c1fa89f7d0c0c4515979d46edbc06c5ca81f43dca8adcc1f7f8114bdba7ebdb1d51f93733943"}, 0xd8) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x56b, 0x1, 0xe93d}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r1}) 21:44:10 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000180)=""/166, 0xa6}], 0xa}, 0x40) 21:44:10 executing program 2: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r0, 0x80000}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], 0x6ac, 0x0, '\x00', 0xa}) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000240)={r0}) socketpair(0x10, 0x0, 0xfffff800, 0x0) 21:44:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0xc}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000040)="72017a72d98d2e69be6775ef6a5450ee262952fdd05f6137d85926056a09b31d24db9f2d9a0a0b0456200a8f04a59b5949a8a47d5425a7748b5afe35a06c5553df000e1de21c57ddb12c32861360f34f85dfcd67", &(0x7f00000000c0)=""/126, &(0x7f0000000140)="a0d9a2e97d5683a5a55687a896db32303c75232d27eb9a40a7b2319245ce02368789720d05de0b69a8ec1795d09353097c7899349cebdfe0e86837ea183f4cab3fd47832344d8b10", &(0x7f00000001c0)="705419241d2259db7a21e5ec3c259d953e7103380a1a927194e08fa43de5c108bf8f28570c85a3ca25d56fb9c01e0b619552fa481df1556faabaf6f269f69af19e134b0dfa6486a3f3795a231d1364dd7a65f89178ea9c0f31b8d114c3db3519e68bf6a02e63db126e6aeec07cfd38f24281dd6578e9e9cb5174444b81fe79863b846d8adbe5ef2da255fd8aaadca2bfce5e72e81fd8ac", 0xd6e, r1}, 0x38) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0xc}, 0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000040)="72017a72d98d2e69be6775ef6a5450ee262952fdd05f6137d85926056a09b31d24db9f2d9a0a0b0456200a8f04a59b5949a8a47d5425a7748b5afe35a06c5553df000e1de21c57ddb12c32861360f34f85dfcd67", &(0x7f00000000c0)=""/126, &(0x7f0000000140)="a0d9a2e97d5683a5a55687a896db32303c75232d27eb9a40a7b2319245ce02368789720d05de0b69a8ec1795d09353097c7899349cebdfe0e86837ea183f4cab3fd47832344d8b10", &(0x7f00000001c0)="705419241d2259db7a21e5ec3c259d953e7103380a1a927194e08fa43de5c108bf8f28570c85a3ca25d56fb9c01e0b619552fa481df1556faabaf6f269f69af19e134b0dfa6486a3f3795a231d1364dd7a65f89178ea9c0f31b8d114c3db3519e68bf6a02e63db126e6aeec07cfd38f24281dd6578e9e9cb5174444b81fe79863b846d8adbe5ef2da255fd8aaadca2bfce5e72e81fd8ac", 0xd6e, r1}, 0x38) (async) 21:44:10 executing program 3: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x4, 0x0, 0x1000}) (async) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x7f, 0x440200) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000002c0)={0x2, 0x3f, 0x7, 0x6}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x5, 0x3ff, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000004c0)={r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/14) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000340)) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0}]}) (async, rerun: 32) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x606, 0x200000) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f0000000400)={r5, 0x1}) 21:44:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x56b, 0x1, 0xe93d}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r1}) 21:44:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) socketpair(0x23, 0x800, 0x28, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:10 executing program 2: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r0, 0x80000}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], 0x6ac, 0x0, '\x00', 0xa}) (async) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000240)={r0}) (async) socketpair(0x10, 0x0, 0xfffff800, 0x0) 21:44:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x56b, 0x1, 0xe93d}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r1}) 21:44:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x23}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r2}) 21:44:10 executing program 4: socket$kcm(0x29, 0x2, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000180)=""/166, 0xa6}], 0xa}, 0x40) 21:44:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x56b, 0x1, 0xe93d}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000100)) 21:44:10 executing program 2: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r0, 0x80000}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], 0x6ac, 0x0, '\x00', 0xa}) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000240)={r0}) socketpair(0x10, 0x0, 0xfffff800, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r0, 0x80000}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x100) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], 0x6ac, 0x0, '\x00', 0xa}) (async) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x800) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000240)={r0}) (async) socketpair(0x10, 0x0, 0xfffff800, 0x0) (async) 21:44:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="86877b4a076f6797c265d5501746cb52ab8ce8ad1ee789649d4eb298ed19f37d2220e2fb428258566264ea8e2961e42c777c5e049e4f78030a3c191a87e92a65"}, 0x20) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180), 0x6, 0x3, 0x3}) 21:44:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:10 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000180)=""/166, 0xa6}], 0xa}, 0x40) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000180)=""/166, 0xa6}], 0xa}, 0x40) (async) 21:44:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r2}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r2}) (async) 21:44:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x56b, 0x1, 0xe93d}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x1, 0x0, 0x0}) 21:44:10 executing program 2: socketpair(0x18, 0x2, 0xffdff800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xfffffffa, 0x101, 0x5, 0xffe000}, 0x10) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) 21:44:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0xfffffffc, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 21:44:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="86877b4a076f6797c265d5501746cb52ab8ce8ad1ee789649d4eb298ed19f37d2220e2fb428258566264ea8e2961e42c777c5e049e4f78030a3c191a87e92a65"}, 0x20) (async, rerun: 64) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil}) (rerun: 64) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180), 0x6, 0x3, 0x3}) [ 1489.749095] ================================================================== [ 1489.756760] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x200/0x210 [ 1489.763771] Read of size 8 at addr ffff8880b35a5140 by task syz-executor.3/14046 [ 1489.771297] [ 1489.772924] CPU: 0 PID: 14046 Comm: syz-executor.3 Not tainted 4.14.262-syzkaller #0 [ 1489.780794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.790144] Call Trace: [ 1489.792731] dump_stack+0x1b2/0x281 [ 1489.796361] print_address_description.cold+0x54/0x1d3 [ 1489.801637] kasan_report_error.cold+0x8a/0x191 [ 1489.806304] ? vgem_gem_dumb_create+0x200/0x210 [ 1489.810975] __asan_report_load8_noabort+0x68/0x70 [ 1489.815908] ? vgem_gem_dumb_create+0x200/0x210 [ 1489.820574] vgem_gem_dumb_create+0x200/0x210 [ 1489.825065] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1489.830083] ? __drm_printfn_debug+0x70/0x70 [ 1489.834489] drm_ioctl_kernel+0x14c/0x200 [ 1489.838633] drm_ioctl+0x42e/0x890 [ 1489.842175] ? __drm_printfn_debug+0x70/0x70 21:44:10 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffe98}, {0x0, 0x41}, {0x0}, {0x0}], 0x9}, 0x0) socketpair(0xb, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @bcast, @bcast]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc4}, 0x40, 0x0, '\x00', @b}) getsockname$ax25(r1, 0x0, &(0x7f0000000200)) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x1, 0xfffffffb, 0x81, 0x80}) r3 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f0000000100)=""/21, 0x15}], 0x30, &(0x7f0000000300)}, 0x40) 21:44:10 executing program 2: socketpair(0x18, 0x2, 0xffdff800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xfffffffa, 0x101, 0x5, 0xffe000}, 0x10) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) 21:44:10 executing program 2: socketpair(0x18, 0x2, 0xffdff800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xfffffffa, 0x101, 0x5, 0xffe000}, 0x10) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) socketpair(0x18, 0x2, 0xffdff800, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xfffffffa, 0x101, 0x5, 0xffe000}, 0x10) (async) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) 21:44:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x800, 0x9, 0x1}, 0x10) socketpair(0xa, 0x0, 0xfffff800, 0x0) 21:44:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x800, 0x9, 0x1}, 0x10) socketpair(0xa, 0x0, 0xfffff800, 0x0) [ 1489.846584] ? drm_getstats+0x20/0x20 [ 1489.850387] ? trace_hardirqs_on+0x10/0x10 [ 1489.854626] ? drm_getstats+0x20/0x20 [ 1489.858423] do_vfs_ioctl+0x75a/0xff0 [ 1489.862226] ? lock_acquire+0x170/0x3f0 [ 1489.866196] ? ioctl_preallocate+0x1a0/0x1a0 [ 1489.870610] ? __fget+0x2df/0x460 [ 1489.874061] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.878033] ? security_file_ioctl+0x83/0xb0 [ 1489.882438] SyS_ioctl+0x7f/0xb0 [ 1489.885797] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.889765] do_syscall_64+0x1d5/0x640 [ 1489.893654] entry_SYSCALL_64_after_hwframe+0x46/0xbb 21:44:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x800, 0x9, 0x1}, 0x10) socketpair(0xa, 0x0, 0xfffff800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x800, 0x9, 0x1}, 0x10) (async) socketpair(0xa, 0x0, 0xfffff800, 0x0) (async) 21:44:10 executing program 2: socketpair(0x2b, 0x0, 0x7ff, 0x0) [ 1489.898843] RIP: 0033:0x7f57aaf94fe9 [ 1489.902554] RSP: 002b:00007f57a98a7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.910255] RAX: ffffffffffffffda RBX: 00007f57ab0a81d0 RCX: 00007f57aaf94fe9 [ 1489.917664] RDX: 0000000020000240 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1489.924929] RBP: 00007f57aafef08d R08: 0000000000000000 R09: 0000000000000000 [ 1489.932196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.939462] R13: 00007ffc82a1f7ff R14: 00007f57a98a7300 R15: 0000000000022000 [ 1489.946721] [ 1489.948327] Allocated by task 14046: [ 1489.952022] kasan_kmalloc+0xeb/0x160 [ 1489.955807] kmem_cache_alloc_trace+0x131/0x3d0 [ 1489.960456] __vgem_gem_create+0x44/0xe0 [ 1489.964498] vgem_gem_dumb_create+0xc5/0x210 [ 1489.968884] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1489.973881] drm_ioctl_kernel+0x14c/0x200 [ 1489.978015] drm_ioctl+0x42e/0x890 [ 1489.981541] do_vfs_ioctl+0x75a/0xff0 [ 1489.985327] SyS_ioctl+0x7f/0xb0 [ 1489.988682] do_syscall_64+0x1d5/0x640 [ 1489.992557] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1489.997811] [ 1489.999419] Freed by task 14046: [ 1490.002765] kasan_slab_free+0xc3/0x1a0 [ 1490.006718] kfree+0xc9/0x250 [ 1490.009800] drm_gem_object_free+0x8f/0x150 [ 1490.014119] drm_gem_object_put_unlocked+0xc3/0x160 [ 1490.019117] vgem_gem_dumb_create+0xf2/0x210 [ 1490.023505] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1490.028501] drm_ioctl_kernel+0x14c/0x200 [ 1490.032640] drm_ioctl+0x42e/0x890 [ 1490.036164] do_vfs_ioctl+0x75a/0xff0 [ 1490.039943] SyS_ioctl+0x7f/0xb0 [ 1490.043285] do_syscall_64+0x1d5/0x640 [ 1490.047156] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.052321] [ 1490.053947] The buggy address belongs to the object at ffff8880b35a5040 [ 1490.053947] which belongs to the cache kmalloc-512 of size 512 [ 1490.066588] The buggy address is located 256 bytes inside of [ 1490.066588] 512-byte region [ffff8880b35a5040, ffff8880b35a5240) [ 1490.078507] The buggy address belongs to the page: [ 1490.083422] page:ffffea0002cd6940 count:1 mapcount:0 mapping:ffff8880b35a5040 index:0x0 [ 1490.092469] flags: 0xfff00000000100(slab) [ 1490.096605] raw: 00fff00000000100 ffff8880b35a5040 0000000000000000 0000000100000006 [ 1490.104465] raw: ffffea00024c5d60 ffffea0002ad2360 ffff88813fe74940 0000000000000000 [ 1490.113108] page dumped because: kasan: bad access detected [ 1490.118804] [ 1490.120407] Memory state around the buggy address: [ 1490.125310] ffff8880b35a5000: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1490.132650] ffff8880b35a5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1490.140156] >ffff8880b35a5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1490.147493] ^ [ 1490.152922] ffff8880b35a5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1490.160266] ffff8880b35a5200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1490.167703] ================================================================== [ 1490.175474] Disabling lock debugging due to kernel taint [ 1490.212098] Kernel panic - not syncing: panic_on_warn set ... [ 1490.212098] [ 1490.219501] CPU: 0 PID: 14046 Comm: syz-executor.3 Tainted: G B 4.14.262-syzkaller #0 [ 1490.228584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.237934] Call Trace: [ 1490.240508] dump_stack+0x1b2/0x281 [ 1490.244116] panic+0x1f9/0x42d [ 1490.247288] ? add_taint.cold+0x16/0x16 [ 1490.251242] ? ___preempt_schedule+0x16/0x18 [ 1490.255631] kasan_end_report+0x43/0x49 [ 1490.259599] kasan_report_error.cold+0xa7/0x191 [ 1490.264255] ? vgem_gem_dumb_create+0x200/0x210 [ 1490.268909] __asan_report_load8_noabort+0x68/0x70 [ 1490.273816] ? vgem_gem_dumb_create+0x200/0x210 [ 1490.278464] vgem_gem_dumb_create+0x200/0x210 [ 1490.282941] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1490.287936] ? __drm_printfn_debug+0x70/0x70 [ 1490.292322] drm_ioctl_kernel+0x14c/0x200 [ 1490.296455] drm_ioctl+0x42e/0x890 [ 1490.299974] ? __drm_printfn_debug+0x70/0x70 [ 1490.304811] ? drm_getstats+0x20/0x20 [ 1490.308599] ? trace_hardirqs_on+0x10/0x10 [ 1490.312810] ? drm_getstats+0x20/0x20 [ 1490.316586] do_vfs_ioctl+0x75a/0xff0 [ 1490.320364] ? lock_acquire+0x170/0x3f0 [ 1490.324315] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.328719] ? __fget+0x2df/0x460 [ 1490.332147] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.336103] ? security_file_ioctl+0x83/0xb0 [ 1490.340500] SyS_ioctl+0x7f/0xb0 [ 1490.343847] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.347798] do_syscall_64+0x1d5/0x640 [ 1490.351667] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.356839] RIP: 0033:0x7f57aaf94fe9 [ 1490.360545] RSP: 002b:00007f57a98a7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.368230] RAX: ffffffffffffffda RBX: 00007f57ab0a81d0 RCX: 00007f57aaf94fe9 [ 1490.375475] RDX: 0000000020000240 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1490.382726] RBP: 00007f57aafef08d R08: 0000000000000000 R09: 0000000000000000 [ 1490.389972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.397217] R13: 00007ffc82a1f7ff R14: 00007f57a98a7300 R15: 0000000000022000 [ 1490.404739] Kernel Offset: disabled [ 1490.408377] Rebooting in 86400 seconds..