NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xff, 0x7ff, 0x0, 0x5, 0x7f, "f09fbf52f6c7de2c8ad2770803d638e7a8a310", 0x7fffffff, 0x2})
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x2, 0x0, 0xf})
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2) (async)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xff, 0x7ff, 0x0, 0x5, 0x7f, "f09fbf52f6c7de2c8ad2770803d638e7a8a310", 0x7fffffff, 0x2}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x2, 0x0, 0xf}) (async)

00:32:47 executing program 4:
r0 = socket(0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)

00:32:47 executing program 3:
r0 = socket(0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000)
prctl$PR_GET_SECCOMP(0x15)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x2, 0xff, 0x2)

00:32:47 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x511204, 0x0)
mmap$dsp(&(0x7f000028e000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0x0)

00:32:47 executing program 4:
r0 = socket(0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)

00:32:47 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xff, 0x7ff, 0x0, 0x5, 0x7f, "f09fbf52f6c7de2c8ad2770803d638e7a8a310", 0x7fffffff, 0x2})
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x2, 0x0, 0xf})

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 3:
r0 = socket(0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x511204, 0x0)
mmap$dsp(&(0x7f000028e000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0x0)

00:32:47 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000) (async)
prctl$PR_GET_SECCOMP(0x15) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x2, 0xff, 0x2)

00:32:47 executing program 4:
r0 = socket(0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)

00:32:47 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0)
ptrace$setsig(0x4203, 0xffffffffffffffff, 0x8000000000000006, &(0x7f0000000080)={0x3e, 0xbb61, 0x7a6})
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f000014b000/0x4000)=nil, 0x14, 0x4, 0x21})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r3=>0x0})
ptrace$setsig(0x4203, r3, 0x7, &(0x7f0000000180)={0x1f, 0x1ff, 0x80000000})

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x511204, 0x0)
mmap$dsp(&(0x7f000028e000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0x0)

00:32:47 executing program 3:
r0 = socket(0x29, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) (async, rerun: 64)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) (async, rerun: 64)
ptrace$setsig(0x4203, 0xffffffffffffffff, 0x8000000000000006, &(0x7f0000000080)={0x3e, 0xbb61, 0x7a6}) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f000014b000/0x4000)=nil, 0x14, 0x4, 0x21}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r3=>0x0})
ptrace$setsig(0x4203, r3, 0x7, &(0x7f0000000180)={0x1f, 0x1ff, 0x80000000})

00:32:47 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000)
prctl$PR_GET_SECCOMP(0x15) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x2, 0xff, 0x2)

00:32:47 executing program 4:
r0 = socket(0x29, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)

00:32:47 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8000, 0x254a00)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_status(&(0x7f0000255000/0x4000)=nil, 0x1000, 0x0, 0x50, r0, 0x82000000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140a, 0x2, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000885)
mmap(&(0x7f00003a0000/0x4000)=nil, 0x4000, 0x200000c, 0x8010, r1, 0x231cc000)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000175000/0x4000)=nil, 0x4000})
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0xffffffffffffffff)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000406816010a1400042bbd7000fddbdf250800010002000000080001000100000008000300080001000200000093c2bb16f2e7fe4a6124f131331c6048ff880e14f22d8e66f8d821ac69478432087175d7f8cb64c073e5175a007e7377d4ede10eb91c7e207036678fca6bb94c9aeeb1fd0090de37131d523ac6aa45edd0ca507afc3b786de7b59763fb6a000000000000000000"], 0x30}}, 0x20000001)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 3:
r0 = socket(0x29, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 2:
mbind(&(0x7f0000175000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040)=0x100000001, 0xff, 0x2)
mmap$fb(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x26000)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x881f912e968d2978)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000195000/0x1000)=nil, 0x1000})
shmget(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil)

00:32:47 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) (async)
ptrace$setsig(0x4203, 0xffffffffffffffff, 0x8000000000000006, &(0x7f0000000080)={0x3e, 0xbb61, 0x7a6})
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f000014b000/0x4000)=nil, 0x14, 0x4, 0x21}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r3=>0x0})
ptrace$setsig(0x4203, r3, 0x7, &(0x7f0000000180)={0x1f, 0x1ff, 0x80000000})

00:32:47 executing program 3:
r0 = socket(0x29, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 2:
mbind(&(0x7f0000175000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040)=0x100000001, 0xff, 0x2) (async)
mmap$fb(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x26000) (async)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x881f912e968d2978) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000195000/0x1000)=nil, 0x1000}) (async)
shmget(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 4:
r0 = socket(0x29, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)

00:32:47 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8000, 0x254a00)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_status(&(0x7f0000255000/0x4000)=nil, 0x1000, 0x0, 0x50, r0, 0x82000000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140a, 0x2, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000885)
mmap(&(0x7f00003a0000/0x4000)=nil, 0x4000, 0x200000c, 0x8010, r1, 0x231cc000)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000175000/0x4000)=nil, 0x4000})
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0xffffffffffffffff)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000406816010a1400042bbd7000fddbdf250800010002000000080001000100000008000300080001000200000093c2bb16f2e7fe4a6124f131331c6048ff880e14f22d8e66f8d821ac69478432087175d7f8cb64c073e5175a007e7377d4ede10eb91c7e207036678fca6bb94c9aeeb1fd0090de37131d523ac6aa45edd0ca507afc3b786de7b59763fb6a000000000000000000"], 0x30}}, 0x20000001)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8000, 0x254a00) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$snddsp_status(&(0x7f0000255000/0x4000)=nil, 0x1000, 0x0, 0x50, r0, 0x82000000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140a, 0x2, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000885) (async)
mmap(&(0x7f00003a0000/0x4000)=nil, 0x4000, 0x200000c, 0x8010, r1, 0x231cc000) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000175000/0x4000)=nil, 0x4000}) (async)
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0xffffffffffffffff) (async)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000406816010a1400042bbd7000fddbdf250800010002000000080001000100000008000300080001000200000093c2bb16f2e7fe4a6124f131331c6048ff880e14f22d8e66f8d821ac69478432087175d7f8cb64c073e5175a007e7377d4ede10eb91c7e207036678fca6bb94c9aeeb1fd0090de37131d523ac6aa45edd0ca507afc3b786de7b59763fb6a000000000000000000"], 0x30}}, 0x20000001) (async)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_status(&(0x7f0000276000/0x1000)=nil, 0x1000, 0xc, 0x4000010, r1, 0x82000000)
mmap$snddsp_control(&(0x7f0000178000/0x2000)=nil, 0x1000, 0x2000004, 0x4080010, r0, 0x83000000)

00:32:47 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x0, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 2:
mbind(&(0x7f0000175000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040)=0x100000001, 0xff, 0x2)
mmap$fb(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x26000)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x881f912e968d2978)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000195000/0x1000)=nil, 0x1000})
shmget(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil)
mbind(&(0x7f0000175000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040)=0x100000001, 0xff, 0x2) (async)
mmap$fb(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x26000) (async)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x881f912e968d2978) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000195000/0x1000)=nil, 0x1000}) (async)
shmget(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) (async)

00:32:47 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async, rerun: 64)
mmap$snddsp_status(&(0x7f0000276000/0x1000)=nil, 0x1000, 0xc, 0x4000010, r1, 0x82000000) (rerun: 64)
mmap$snddsp_control(&(0x7f0000178000/0x2000)=nil, 0x1000, 0x2000004, 0x4080010, r0, 0x83000000)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 4:
r0 = socket(0x29, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)

00:32:47 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8000, 0x254a00)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_status(&(0x7f0000255000/0x4000)=nil, 0x1000, 0x0, 0x50, r0, 0x82000000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140a, 0x2, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000885)
mmap(&(0x7f00003a0000/0x4000)=nil, 0x4000, 0x200000c, 0x8010, r1, 0x231cc000)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000175000/0x4000)=nil, 0x4000})
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0xffffffffffffffff)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000406816010a1400042bbd7000fddbdf250800010002000000080001000100000008000300080001000200000093c2bb16f2e7fe4a6124f131331c6048ff880e14f22d8e66f8d821ac69478432087175d7f8cb64c073e5175a007e7377d4ede10eb91c7e207036678fca6bb94c9aeeb1fd0090de37131d523ac6aa45edd0ca507afc3b786de7b59763fb6a000000000000000000"], 0x30}}, 0x20000001)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8000, 0x254a00) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$snddsp_status(&(0x7f0000255000/0x4000)=nil, 0x1000, 0x0, 0x50, r0, 0x82000000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140a, 0x2, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000885) (async)
mmap(&(0x7f00003a0000/0x4000)=nil, 0x4000, 0x200000c, 0x8010, r1, 0x231cc000) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000175000/0x4000)=nil, 0x4000}) (async)
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0xffffffffffffffff) (async)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000406816010a1400042bbd7000fddbdf250800010002000000080001000100000008000300080001000200000093c2bb16f2e7fe4a6124f131331c6048ff880e14f22d8e66f8d821ac69478432087175d7f8cb64c073e5175a007e7377d4ede10eb91c7e207036678fca6bb94c9aeeb1fd0090de37131d523ac6aa45edd0ca507afc3b786de7b59763fb6a000000000000000000"], 0x30}}, 0x20000001) (async)

00:32:47 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async, rerun: 32)
mmap$snddsp_status(&(0x7f0000276000/0x1000)=nil, 0x1000, 0xc, 0x4000010, r1, 0x82000000) (async, rerun: 32)
mmap$snddsp_control(&(0x7f0000178000/0x2000)=nil, 0x1000, 0x2000004, 0x4080010, r0, 0x83000000)

00:32:47 executing program 4:
socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)

00:32:47 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000)
prctl$PR_GET_SECCOMP(0x15)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x2, 0xff, 0x2)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 4:
socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)

00:32:47 executing program 5:
r0 = msgget$private(0x0, 0x1d9)
msgctl$IPC_RMID(r0, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:47 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)

00:32:47 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mprotect(&(0x7f0000197000/0x2000)=nil, 0x2000, 0x8)

00:32:47 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 4:
socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)

00:32:47 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async, rerun: 32)
openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)

00:32:47 executing program 5:
r0 = msgget$private(0x0, 0x1d9)
msgctl$IPC_RMID(r0, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
msgget$private(0x0, 0x1d9) (async)
msgctl$IPC_RMID(r0, 0x0) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2) (async)

00:32:47 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)

00:32:47 executing program 2:
socketpair(0x1f, 0xa, 0x3f, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140b, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000010)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
pkey_mprotect(&(0x7f000031f000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)

00:32:47 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 1:
shmget(0x3, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
r0 = syz_open_pts(0xffffffffffffffff, 0x10800)
mmap$dsp(&(0x7f000029d000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x3ea89000)
socket$inet6_sctp(0xa, 0x5, 0x84)

00:32:47 executing program 5:
r0 = msgget$private(0x0, 0x1d9)
msgctl$IPC_RMID(r0, 0x0) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:47 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)

00:32:47 executing program 1:
shmget(0x3, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
r0 = syz_open_pts(0xffffffffffffffff, 0x10800)
mmap$dsp(&(0x7f000029d000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x3ea89000)
socket$inet6_sctp(0xa, 0x5, 0x84)
shmget(0x3, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
syz_open_pts(0xffffffffffffffff, 0x10800) (async)
mmap$dsp(&(0x7f000029d000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x3ea89000) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)

00:32:47 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

00:32:47 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 1:
shmget(0x3, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
r0 = syz_open_pts(0xffffffffffffffff, 0x10800) (async, rerun: 64)
mmap$dsp(&(0x7f000029d000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (rerun: 64)
mmap(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x3ea89000) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)

00:32:47 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

00:32:47 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
mmap$dsp(&(0x7f00000bf000/0x4000)=nil, 0x4000, 0x2000008, 0x10010, r0, 0x0)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:47 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

00:32:48 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
mmap$dsp(&(0x7f00000bf000/0x4000)=nil, 0x4000, 0x2000008, 0x10010, r0, 0x0)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f00000000c0), 0x81, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f000022c000/0x2000)=nil})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r0, 0x5})
shmat(0x0, &(0x7f00002ae000/0x2000)=nil, 0x0)

00:32:48 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10}, 0x10}}, 0x4045)

00:32:48 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10}, 0x10}}, 0x0)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f00000000c0), 0x81, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f000022c000/0x2000)=nil}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r0, 0x5}) (async)
shmat(0x0, &(0x7f00002ae000/0x2000)=nil, 0x0)

00:32:48 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
mmap$dsp(&(0x7f00000bf000/0x4000)=nil, 0x4000, 0x2000008, 0x10010, r0, 0x0)

00:32:48 executing program 4:
msgrcv(0xffffffffffffffff, &(0x7f0000000080)={0x0, ""/41}, 0x31, 0x0, 0x3000)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x1, 0xfe, 0x3)
r0 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000128000/0x2000)=nil)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000016f000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/23, 0x17, 0x0, &(0x7f0000000240)=""/219, 0xdb}, &(0x7f00000001c0)=0x40)
shmat(r0, &(0x7f0000395000/0x4000)=nil, 0x0)

00:32:48 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f000013d000/0x3000)=nil, 0xfffffffffffffff9, 0x5, 0x4})
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080))

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f00000000c0), 0x81, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f000022c000/0x2000)=nil}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r0, 0x5}) (async)
shmat(0x0, &(0x7f00002ae000/0x2000)=nil, 0x0)

00:32:48 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x4045)

00:32:48 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = shmget(0x1, 0x3000, 0x20, &(0x7f000023a000/0x3000)=nil)
shmat(r0, &(0x7f000032f000/0x1000)=nil, 0x6000)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140d, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

00:32:48 executing program 2:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=')\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000329000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=')\x00')
shmget(0x1, 0x3000, 0x20, &(0x7f00001ef000/0x3000)=nil)
mbind(&(0x7f00003e6000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x1, 0x101, 0x2)

00:32:48 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0)
mmap$binder(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3ea122a9)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x4045)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=')\x00') (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000329000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=')\x00')
shmget(0x1, 0x3000, 0x20, &(0x7f00001ef000/0x3000)=nil) (async)
mbind(&(0x7f00003e6000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x1, 0x101, 0x2)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x4045)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=')\x00') (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000329000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=')\x00')
shmget(0x1, 0x3000, 0x20, &(0x7f00001ef000/0x3000)=nil) (async)
mbind(&(0x7f00003e6000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x1, 0x101, 0x2)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 2:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = shmget(0x1, 0x3000, 0x20, &(0x7f000023a000/0x3000)=nil)
shmat(r0, &(0x7f000032f000/0x1000)=nil, 0x6000)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140d, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2) (async)
shmget(0x1, 0x3000, 0x20, &(0x7f000023a000/0x3000)=nil) (async)
shmat(r0, &(0x7f000032f000/0x1000)=nil, 0x6000) (async)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140d, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 1:
msgsnd(0x0, &(0x7f0000000000)={0x3, "c2c7a5"}, 0xb, 0x0)
getgid()
mbind(&(0x7f0000347000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x6, 0xfe, 0x0)

00:32:48 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a3d6327f7b3c8f1a6339529683df2ac39a22bbd58a1243749d4c0f6583dd0307"}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0xc0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan1\x00'})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x44, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}]}, 0x44}}, 0x40011)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)

00:32:48 executing program 2:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = shmget(0x1, 0x3000, 0x20, &(0x7f000023a000/0x3000)=nil)
shmat(r0, &(0x7f000032f000/0x1000)=nil, 0x6000)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140d, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2) (async)
shmget(0x1, 0x3000, 0x20, &(0x7f000023a000/0x3000)=nil) (async)
shmat(r0, &(0x7f000032f000/0x1000)=nil, 0x6000) (async)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140d, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async)

00:32:48 executing program 1:
msgsnd(0x0, &(0x7f0000000000)={0x3, "c2c7a5"}, 0xb, 0x0)
getgid() (async, rerun: 32)
mbind(&(0x7f0000347000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x6, 0xfe, 0x0) (rerun: 32)

00:32:48 executing program 2:
r0 = socket(0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 1:
msgsnd(0x0, &(0x7f0000000000)={0x3, "c2c7a5"}, 0xb, 0x0)
getgid() (async)
mbind(&(0x7f0000347000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x6, 0xfe, 0x0)

00:32:48 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 2:
r0 = socket(0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 5:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:48 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x21, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f000025b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/75, 0x4b, 0x1, &(0x7f0000000100)=""/178, 0xb2}, &(0x7f00000001c0)=0x40)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0xd, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000018000/0x3000)=nil, 0x3000})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$binder(&(0x7f00000ba000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7f)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 5:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0xff, 0x0) (async)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000) (async)

00:32:48 executing program 2:
r0 = socket(0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x21, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f000025b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/75, 0x4b, 0x1, &(0x7f0000000100)=""/178, 0xb2}, &(0x7f00000001c0)=0x40)

00:32:48 executing program 5:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0xff, 0x0) (async)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000) (async)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0xd, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) (async, rerun: 32)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000018000/0x3000)=nil, 0x3000}) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$binder(&(0x7f00000ba000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7f) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 2:
r0 = socket(0x29, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x21, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f000025b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/75, 0x4b, 0x1, &(0x7f0000000100)=""/178, 0xb2}, &(0x7f00000001c0)=0x40)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0xd, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000018000/0x3000)=nil, 0x3000})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$binder(&(0x7f00000ba000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7f)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0xd, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000018000/0x3000)=nil, 0x3000}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
mmap$binder(&(0x7f00000ba000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7f) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0) (async)

00:32:48 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = userfaultfd(0x800)
mbind(&(0x7f000036b000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000001140)=0x7, 0x7fffffffffffffff, 0x0)
userfaultfd(0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a02, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000001180), &(0x7f00000011c0)=0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f000021d000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/39, 0x27, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f00001cb000/0x1000)=nil, 0x1000})

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x2)

00:32:48 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x21, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)

00:32:48 executing program 2:
r0 = socket(0x29, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = userfaultfd(0x800)
mbind(&(0x7f000036b000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000001140)=0x7, 0x7fffffffffffffff, 0x0)
userfaultfd(0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a02, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000001180), &(0x7f00000011c0)=0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f000021d000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/39, 0x27, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f00001cb000/0x1000)=nil, 0x1000})
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2) (async)
userfaultfd(0x800) (async)
mbind(&(0x7f000036b000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000001140)=0x7, 0x7fffffffffffffff, 0x0) (async)
userfaultfd(0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a02, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000001180), &(0x7f00000011c0)=0x10) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f000021d000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/39, 0x27, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f00001cb000/0x1000)=nil, 0x1000}) (async)

00:32:48 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x21, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x2)

00:32:48 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = userfaultfd(0x800)
mbind(&(0x7f000036b000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000001140)=0x7, 0x7fffffffffffffff, 0x0)
userfaultfd(0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a02, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000001180), &(0x7f00000011c0)=0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f000021d000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/39, 0x27, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f00001cb000/0x1000)=nil, 0x1000})
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2) (async)
userfaultfd(0x800) (async)
mbind(&(0x7f000036b000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000001140)=0x7, 0x7fffffffffffffff, 0x0) (async)
userfaultfd(0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a02, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000001180), &(0x7f00000011c0)=0x10) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f000021d000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/39, 0x27, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f00001cb000/0x1000)=nil, 0x1000}) (async)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x0, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 2:
r0 = socket(0x29, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x21, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x2)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x2) (async)

00:32:48 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 0:
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 5:
msgctl$MSG_STAT(0x0, 0xb, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:48 executing program 1:
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001014000229bd7000fddbdf2508004b0013000000080003000418000008004a000200000079faa23da9202d1df62247e9eec4f49c4b8275dfcf3b077ddf3136634e3ca420715103731b2b06789505d7ce3f2c3bd1b0c94526f1ec4b6d71423c22ad7b4526432d3e3da3ce6a831c60770159e5414725d1a6861388c160f1d5c16f12beb8979a9a2df667a22d5bbd"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1410, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x40400a0)
mbind(&(0x7f000015f000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000040), 0x4000fe, 0x1)

00:32:48 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, 0x0, 0xff, 0x2)

00:32:48 executing program 0:
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:48 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 1:
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001014000229bd7000fddbdf2508004b0013000000080003000418000008004a000200000079faa23da9202d1df62247e9eec4f49c4b8275dfcf3b077ddf3136634e3ca420715103731b2b06789505d7ce3f2c3bd1b0c94526f1ec4b6d71423c22ad7b4526432d3e3da3ce6a831c60770159e5414725d1a6861388c160f1d5c16f12beb8979a9a2df667a22d5bbd"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1410, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x40400a0)
mbind(&(0x7f000015f000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000040), 0x4000fe, 0x1)

00:32:48 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:48 executing program 5:
msgctl$MSG_STAT(0x0, 0xb, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:49 executing program 0:
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:49 executing program 1:
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001014000229bd7000fddbdf2508004b0013000000080003000418000008004a000200000079faa23da9202d1df62247e9eec4f49c4b8275dfcf3b077ddf3136634e3ca420715103731b2b06789505d7ce3f2c3bd1b0c94526f1ec4b6d71423c22ad7b4526432d3e3da3ce6a831c60770159e5414725d1a6861388c160f1d5c16f12beb8979a9a2df667a22d5bbd"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1410, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x40400a0)
mbind(&(0x7f000015f000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000040), 0x4000fe, 0x1)

00:32:49 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, 0x0, 0xff, 0x2)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040)=0x21, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:49 executing program 5:
msgctl$MSG_STAT(0x0, 0xb, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:49 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, 0x0, 0xff, 0x2)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040)=0x21, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:49 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000300))
socketpair(0xd8bd767c3df7be82, 0x2, 0x81, &(0x7f0000000000))
mbind(&(0x7f0000299000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x400000000000, 0x2, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)={0x1c, "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"})

00:32:49 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040), 0x0, 0x2)

00:32:49 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000300))
socketpair(0xd8bd767c3df7be82, 0x2, 0x81, &(0x7f0000000000))
mbind(&(0x7f0000299000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x400000000000, 0x2, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)={0x1c, "3f97be9056d0c98650b65f108ec19a38738ddd6c289f38a1318fb94d731ea2039f5a060fb5ccd638c741d812c88152cd47b7f4a42543d36d176f1565180fddd4c4726b6f7eef3a30b8df4144e306cd3d863fda5209818749d766ed55a5d3237c9e0db9f05c9aa2cc9ea7fb9823ef242cce3bbb6c30b2b94a2f6488356a40c5ea6b027ff14fe057ac75095d8e1a7c439a275603c89f7c634977bd1567332a058c8692e760b14d7353d73464478adf374813af4f4688b7aafaea59488b40e01c89b811f015cebaaf261df9059b52b9446f0160878f0a00bc0d8e118fd565d6803d11864f308fb07bc8fd2195dc00c21b295a160ef4a85689ed011c867b6655a69dcd3f43e421f45786ff3943703b7841a10469562c6f0753b5bdc5ad0070a3da980572ae28481e3ce70c70884b671e2fbe708d692e1329594a08e351653688f6f157ae986be8ae6c07f91ae6d53ff6d4b2bad035e198d3f364406bae50cf930b4cca1a0d6a6201563bde10829bd9ae79775425877a0adfdcdd82b52d655b6a01ca70179429983e51a218267d9e6154cbff5db96548a29b2a0bccbaa0ed4628988494a109e56cd32e8583f3f96760f5c43960a0a75ad268e7e123e4a0618587a44872d91ce277ba7cf0db9cf0eb096a561cd71c8e1fec82ca8b232a55a3f52153746db70d9e63454f9327f85c00"})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000300)) (async)
socketpair(0xd8bd767c3df7be82, 0x2, 0x81, &(0x7f0000000000)) (async)
mbind(&(0x7f0000299000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x400000000000, 0x2, 0x1) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)={0x1c, "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"}) (async)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040)=0x21, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:49 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 5:
msgctl$MSG_STAT(0x0, 0xb, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040), 0x0, 0x2)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0xff, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:49 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000300)) (async, rerun: 32)
socketpair(0xd8bd767c3df7be82, 0x2, 0x81, &(0x7f0000000000)) (async, rerun: 32)
mbind(&(0x7f0000299000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x400000000000, 0x2, 0x1) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async, rerun: 32)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async, rerun: 64)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)={0x1c, "3f97be9056d0c98650b65f108ec19a38738ddd6c289f38a1318fb94d731ea2039f5a060fb5ccd638c741d812c88152cd47b7f4a42543d36d176f1565180fddd4c4726b6f7eef3a30b8df4144e306cd3d863fda5209818749d766ed55a5d3237c9e0db9f05c9aa2cc9ea7fb9823ef242cce3bbb6c30b2b94a2f6488356a40c5ea6b027ff14fe057ac75095d8e1a7c439a275603c89f7c634977bd1567332a058c8692e760b14d7353d73464478adf374813af4f4688b7aafaea59488b40e01c89b811f015cebaaf261df9059b52b9446f0160878f0a00bc0d8e118fd565d6803d11864f308fb07bc8fd2195dc00c21b295a160ef4a85689ed011c867b6655a69dcd3f43e421f45786ff3943703b7841a10469562c6f0753b5bdc5ad0070a3da980572ae28481e3ce70c70884b671e2fbe708d692e1329594a08e351653688f6f157ae986be8ae6c07f91ae6d53ff6d4b2bad035e198d3f364406bae50cf930b4cca1a0d6a6201563bde10829bd9ae79775425877a0adfdcdd82b52d655b6a01ca70179429983e51a218267d9e6154cbff5db96548a29b2a0bccbaa0ed4628988494a109e56cd32e8583f3f96760f5c43960a0a75ad268e7e123e4a0618587a44872d91ce277ba7cf0db9cf0eb096a561cd71c8e1fec82ca8b232a55a3f52153746db70d9e63454f9327f85c00"}) (rerun: 64)

00:32:49 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040), 0x0, 0x2)

00:32:49 executing program 5:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:49 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10}, 0x10}}, 0x4045)

00:32:49 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040), 0xfe, 0x1)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:49 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040), 0xff, 0x0)

00:32:49 executing program 5:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/3)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, 0x0, 0xff, 0x2)

00:32:49 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10}, 0x10}}, 0x0)

00:32:49 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040), 0xfe, 0x1)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040), 0xfe, 0x1) (async)

00:32:49 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = userfaultfd(0x800)
mbind(&(0x7f000036b000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000001140)=0x7, 0x7fffffffffffffff, 0x0)
userfaultfd(0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a02, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000001180), &(0x7f00000011c0)=0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f000021d000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/39, 0x27, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f00001cb000/0x1000)=nil, 0x1000})

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:49 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:49 executing program 3:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000200)=0x9, 0x2, 0x2)

00:32:49 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040), 0xfe, 0x1)

00:32:49 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x2, 0x2)

00:32:49 executing program 3:
mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

00:32:49 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:49 executing program 1:
mbind(&(0x7f00003eb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
userfaultfd(0x80801)

00:32:49 executing program 1:
mbind(&(0x7f00003eb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
userfaultfd(0x80801)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f00001b1000/0x1000)=nil, 0x1000})

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x2, 0x2)

00:32:49 executing program 1:
mbind(&(0x7f00003eb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
userfaultfd(0x80801)

00:32:49 executing program 3:
mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x4045)

00:32:49 executing program 5:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 4:
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:49 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0xff, 0xb, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x2, 0x2, 0x1f, 0x7, 0x80, 0x1, '[y}\r'}, 0x7109, 0x4, {}, 0x1, 0x0, r0})
mbind(&(0x7f00000ba000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0xfe, 0x1)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x2, 0x2)

00:32:49 executing program 3:
mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x4045)

00:32:49 executing program 5:
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080))
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
r0 = socket(0xa, 0x3, 0x8)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

00:32:49 executing program 4:
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:49 executing program 5:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000289000/0x1000)=nil})
socket$inet_sctp(0x2, 0x1, 0x84)

00:32:49 executing program 4:
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:49 executing program 3:
mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)

00:32:49 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async, rerun: 32)
openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) (async, rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0xff, 0xb, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x2, 0x2, 0x1f, 0x7, 0x80, 0x1, '[y}\r'}, 0x7109, 0x4, {}, 0x1, 0x0, r0}) (async)
mbind(&(0x7f00000ba000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0xfe, 0x1)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200), 0x2, 0x2)

00:32:49 executing program 3:
mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x4045)

00:32:49 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x106, 0x2)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200), 0x2, 0x2)

00:32:49 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:49 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0xff, 0xb, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x2, 0x2, 0x1f, 0x7, 0x80, 0x1, '[y}\r'}, 0x7109, 0x4, {}, 0x1, 0x0, r0})
mbind(&(0x7f00000ba000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0xfe, 0x1)

00:32:49 executing program 3:
mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200), 0x2, 0x2)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:49 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="6ac43e8c4a36285c9715f9cbb27b6db9", 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)

00:32:49 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x106, 0x2)

00:32:49 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0x3, 0xb, 0x8, 0xc, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0xbc, 0xf1, &(0x7f00000000c0)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0x80000001, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r1, 0x13}, 0x10)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x0, 0x2)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080))
getgid()
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:49 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0x3, 0xb, 0x8, 0xc, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0xbc, 0xf1, &(0x7f00000000c0)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0x80000001, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r1, 0x13}, 0x10)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x0, 0x2)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:49 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0x3, 0xb, 0x8, 0xc, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0xbc, 0xf1, &(0x7f00000000c0)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0x80000001, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r1, 0x13}, 0x10)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0x3, 0xb, 0x8, 0xc, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0xbc, 0xf1, &(0x7f00000000c0)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0x80000001, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r1, 0x13}, 0x10) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)

00:32:49 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x0, 0x2)

00:32:49 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:49 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x106, 0x2)

00:32:50 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x9, 0x2, 0x0)

00:32:50 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080))
getgid()
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'})
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040040)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000000), 0x7ff, 0x6)

00:32:50 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040040) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000000), 0x7ff, 0x6)

00:32:50 executing program 0:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x2, 0x106, 0x2)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080))
getgid()
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 0:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7, 0x204080)
mmap$snddsp_control(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x83000000)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r1 = socket(0x2b, 0x6, 0x3)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1412, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x2, 0x106, 0x2)

00:32:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040040) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000000), 0x7ff, 0x6)

00:32:50 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:50 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080))
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40008c4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002dbd7000fedbdf250c00000008000b000700000008000b002000000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000b00040000000c000600030000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000100030000002dffd20b059f0cabce4d0bc69f6fe64f66c7bb4ee471d05356fe98515d7304b2344dc2814aec45720233fa529c28c002ab093ff4c886fabdf5628a428c2a86f62c923a082aaedd84661665b122278254f0a358c598d05a7949f5d79541277cdb7f86ce9763cfee45285187d0ac4911f8b9d6611c97c70af991b8b50657e9f957"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x49bda5603adf7c86)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004042}, 0x4)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x2, 0x106, 0x2)

00:32:50 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mremap(&(0x7f0000290000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f000030f000/0x3000)=nil)

00:32:50 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x0, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40008c4) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r5=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002dbd7000fedbdf250c00000008000b000700000008000b002000000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000b00040000000c000600030000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000100030000002dffd20b059f0cabce4d0bc69f6fe64f66c7bb4ee471d05356fe98515d7304b2344dc2814aec45720233fa529c28c002ab093ff4c886fabdf5628a428c2a86f62c923a082aaedd84661665b122278254f0a358c598d05a7949f5d79541277cdb7f86ce9763cfee45285187d0ac4911f8b9d6611c97c70af991b8b50657e9f957"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x49bda5603adf7c86)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004042}, 0x4) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)

00:32:50 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:50 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x106, 0x2)

00:32:50 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40008c4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002dbd7000fedbdf250c00000008000b000700000008000b002000000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000b00040000000c000600030000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000100030000002dffd20b059f0cabce4d0bc69f6fe64f66c7bb4ee471d05356fe98515d7304b2344dc2814aec45720233fa529c28c002ab093ff4c886fabdf5628a428c2a86f62c923a082aaedd84661665b122278254f0a358c598d05a7949f5d79541277cdb7f86ce9763cfee45285187d0ac4911f8b9d6611c97c70af991b8b50657e9f957"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x49bda5603adf7c86)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004042}, 0x4)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40008c4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) (async)
sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002dbd7000fedbdf250c00000008000b000700000008000b002000000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000b00040000000c000600030000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000100030000002dffd20b059f0cabce4d0bc69f6fe64f66c7bb4ee471d05356fe98515d7304b2344dc2814aec45720233fa529c28c002ab093ff4c886fabdf5628a428c2a86f62c923a082aaedd84661665b122278254f0a358c598d05a7949f5d79541277cdb7f86ce9763cfee45285187d0ac4911f8b9d6611c97c70af991b8b50657e9f957"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x49bda5603adf7c86) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004042}, 0x4) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)

00:32:50 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:50 executing program 0:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xff, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:50 executing program 3:
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x106, 0x2)

00:32:50 executing program 4:
mbind(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f0000029000/0x4000)=nil, 0x4000)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 1:
mbind(&(0x7f000037d000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x673310e2, 0x9, 0x0)

00:32:50 executing program 3:
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 0:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x106, 0x2)

00:32:50 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mprotect(&(0x7f0000373000/0x3000)=nil, 0x3000, 0x4)

00:32:50 executing program 3:
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 1:
mbind(&(0x7f000037d000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x673310e2, 0x9, 0x0)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040), 0x106, 0x2)

00:32:50 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f000024f000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/202, 0xca, 0x1, &(0x7f0000000180)=""/153, 0x99}, &(0x7f0000000240)=0x40)

00:32:50 executing program 3:
r0 = socket(0x0, 0x3, 0x8)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 1:
mbind(&(0x7f000037d000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x673310e2, 0x9, 0x0)

00:32:50 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mbind(&(0x7f00002ad000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x20, 0x8, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000037000/0x1000)=nil, 0x1000})

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040), 0x106, 0x2)

00:32:50 executing program 1:
socket$inet_sctp(0x2, 0x1, 0x84)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mbind(&(0x7f00002ad000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x20, 0x8, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000037000/0x1000)=nil, 0x1000})

00:32:50 executing program 0:
socketpair(0x2b, 0x2, 0x1a0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040), 0x106, 0x2)

00:32:50 executing program 1:
socket$inet_sctp(0x2, 0x1, 0x84) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)

00:32:50 executing program 3:
r0 = socket(0x0, 0x3, 0x8)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040)=0x10000000000000, 0xfd, 0x2)

00:32:50 executing program 1:
socket$inet_sctp(0x2, 0x1, 0x84) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x0, 0x2)

00:32:50 executing program 3:
r0 = socket(0x0, 0x3, 0x8)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 4:
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1409, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x44800)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x0, 0x2)

00:32:50 executing program 1:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1411, 0x400, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1409, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mmap$binder(&(0x7f0000157000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xa02)

00:32:50 executing program 3:
r0 = socket(0xa, 0x0, 0x8)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x0, 0x2)

00:32:50 executing program 1:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1411, 0x400, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)

00:32:50 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000339000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/250, 0xfa, 0x0, &(0x7f0000000180)=""/240, 0xf0}, &(0x7f0000000280)=0x40)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4045)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10}, 0x10}}, 0x4045)

00:32:50 executing program 0:
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x44400, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1407, 0x20, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40000890)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:50 executing program 1:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1411, 0x400, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1411, 0x400, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)

00:32:50 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x106, 0x0)

00:32:50 executing program 2:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10}, 0x10}}, 0x0)

00:32:50 executing program 0:
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x44400, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1407, 0x20, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40000890)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:50 executing program 3:
r0 = socket(0xa, 0x0, 0x8)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:50 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080)="5d159d1111c746cda807544ca7a7549d02a41984a0431726ea38ffcb5c82c5298278ac298d3ff7c30c25a996900a7b8b0ea7a6287d7688a1993c1a8ece5d176d8cf5f60e14897a74771b1cbcec256a2b8b9e638d3c8ddb841d611eaee7e8edaf3c22669f5fe55377fa", &(0x7f0000000000)=@tcp6}, 0x20)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000140)={0x0, 0x5, 0x178a})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x610241, 0x0)
mmap$dsp(&(0x7f0000126000/0x4000)=nil, 0x4000, 0xc, 0x10, r2, 0x0)

00:32:50 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$binder(&(0x7f000005c000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x81)

00:32:50 executing program 0:
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x44400, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1407, 0x20, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40000890)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:50 executing program 1:
socketpair(0x1, 0x2, 0x0, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000029f000/0x2000)=nil, 0x2000}, 0x1})
userfaultfd(0x80000)
socket$inet6_sctp(0xa, 0x5, 0x84)

00:32:51 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x106, 0x0)

00:32:51 executing program 3:
r0 = socket(0xa, 0x0, 0x8)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:51 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mmap$snddsp_control(&(0x7f0000308000/0x3000)=nil, 0x1000, 0x1, 0x110, 0xffffffffffffffff, 0x83000000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000277000/0x4000)=nil, 0x4000, &(0x7f0000000000))
shmat(0xffffffffffffffff, &(0x7f000025d000/0x2000)=nil, 0x2000)

00:32:51 executing program 0:
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x44400, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 4:
mbind(&(0x7f0000187000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x2, 0x8, 0x2)

00:32:51 executing program 1:
socketpair(0x1, 0x2, 0x0, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000029f000/0x2000)=nil, 0x2000}, 0x1})
userfaultfd(0x80000)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair(0x1, 0x2, 0x0, 0x0) (async)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000029f000/0x2000)=nil, 0x2000}, 0x1}) (async)
userfaultfd(0x80000) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)

00:32:51 executing program 0:
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 5:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x106, 0x0)

00:32:51 executing program 3:
r0 = socket(0xa, 0x3, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:51 executing program 2:
mbind(&(0x7f00000c0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0x106, 0x0)

00:32:51 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e8000/0x7000)=nil, 0x7000}, 0x1})

00:32:51 executing program 1:
socketpair(0x1, 0x2, 0x0, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000029f000/0x2000)=nil, 0x2000}, 0x1}) (async)
userfaultfd(0x80000) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)

00:32:51 executing program 0:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40c000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x7, 0x0, 0x202, 0x1, 0x3ff, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0xb}, 0x48)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0x28140)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap$snddsp_control(&(0x7f0000221000/0x2000)=nil, 0x1000, 0x1000000, 0x13, r1, 0x83000000)
mmap$snddsp_control(&(0x7f0000222000/0x4000)=nil, 0x1000, 0x3, 0x80010, r1, 0x83000000)

00:32:51 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00002db000/0x3000)=nil)

00:32:51 executing program 3:
r0 = socket(0xa, 0x3, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:51 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x5)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f00001e1000/0x2000)=nil, 0x8, 0x1, 0x88})

00:32:51 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40c000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x7, 0x0, 0x202, 0x1, 0x3ff, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0xb}, 0x48)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0x28140)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap$snddsp_control(&(0x7f0000221000/0x2000)=nil, 0x1000, 0x1000000, 0x13, r1, 0x83000000)
mmap$snddsp_control(&(0x7f0000222000/0x4000)=nil, 0x1000, 0x3, 0x80010, r1, 0x83000000)

00:32:51 executing program 0:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x5) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f00001e1000/0x2000)=nil, 0x8, 0x1, 0x88})

00:32:51 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 0:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000000), 0x7, 0x161040)

00:32:51 executing program 3:
r0 = socket(0xa, 0x3, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:51 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40c000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x7, 0x0, 0x202, 0x1, 0x3ff, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0xb}, 0x48)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0x28140)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap$snddsp_control(&(0x7f0000221000/0x2000)=nil, 0x1000, 0x1000000, 0x13, r1, 0x83000000)
mmap$snddsp_control(&(0x7f0000222000/0x4000)=nil, 0x1000, 0x3, 0x80010, r1, 0x83000000)

00:32:51 executing program 4:
mprotect(&(0x7f00002db000/0x3000)=nil, 0x3000, 0x2000007)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0xc002, &(0x7f0000000000), 0x5, 0x2)

00:32:51 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x5)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f00001e1000/0x2000)=nil, 0x8, 0x1, 0x88})

00:32:51 executing program 4:
mprotect(&(0x7f00002db000/0x3000)=nil, 0x3000, 0x2000007)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0xc002, &(0x7f0000000000), 0x5, 0x2)

00:32:51 executing program 0:
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 1:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
remap_file_pages(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x2000001, 0xffffffffffffffff, 0x800)

00:32:51 executing program 3:
socket(0xa, 0x3, 0x8)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:51 executing program 0:
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40c000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x7, 0x0, 0x202, 0x1, 0x3ff, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0xb}, 0x48)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0x28140)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap$snddsp_control(&(0x7f0000221000/0x2000)=nil, 0x1000, 0x1000000, 0x13, r1, 0x83000000)

00:32:51 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000000), 0xff, 0x2)

00:32:51 executing program 1:
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00001de000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/57, 0x39, 0x0, &(0x7f0000000140)=""/6, 0x6}, &(0x7f0000000080)=0x40)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:51 executing program 4:
mprotect(&(0x7f00002db000/0x3000)=nil, 0x3000, 0x2000007)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0xc002, &(0x7f0000000000), 0x5, 0x2)

00:32:51 executing program 3:
socket(0xa, 0x3, 0x8)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:51 executing program 0:
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40c000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x7, 0x0, 0x202, 0x1, 0x3ff, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0xb}, 0x48)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x1)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0x28140)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

00:32:51 executing program 0:
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 3:
socket(0xa, 0x3, 0x8)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

00:32:51 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0xc002, &(0x7f0000000000), 0x5, 0x2)

00:32:51 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0x9, 0x80000})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000200), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1406, 0x10, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}}, 0x240488c9)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:51 executing program 1:
timerfd_create(0x8, 0x0)
msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/80)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x140f, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004}, 0x20000814)
timerfd_gettime(r1, &(0x7f0000000000))
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)

00:32:51 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40c000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x7, 0x0, 0x202, 0x1, 0x3ff, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0xb}, 0x48)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x1)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0x28140)

00:32:51 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
bind$802154_dgram(r0, 0x0, 0x0)

00:32:51 executing program 0:
socket$inet_smc(0x2b, 0x1, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000019b000/0x1000)=nil, 0x1000, &(0x7f0000000000)='!\x00')

00:32:51 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000000), 0x5, 0x2)

00:32:51 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40c000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x7, 0x0, 0x202, 0x1, 0x3ff, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0xb}, 0x48)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x1)

00:32:51 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000000), 0x5, 0x2)

00:32:51 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
remap_file_pages(&(0x7f0000226000/0x4000)=nil, 0x4000, 0x100000c, 0x4, 0x4000)

00:32:51 executing program 5:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40c000, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x1)

00:32:51 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000000), 0x5, 0x2)

00:32:51 executing program 3:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1})

00:32:51 executing program 1:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000092000/0x2000)=nil, 0x2000}, 0x2})

00:32:51 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x1)

00:32:51 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0xc002, 0x0, 0x5, 0x2)

00:32:51 executing program 0:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)

00:32:51 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mprotect(&(0x7f00000d5000/0x3000)=nil, 0x3000, 0x4)

00:32:51 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0xc002, 0x0, 0x0, 0x2)

00:32:51 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=0x4)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x280, 0x1, {0x0, 0xea60}, {0x0, 0x2710}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x33, 0x3, 0x0, 0x0, "82f7c89b6b283b72a6790ab1b5bbdd79436d8cb556832c2e03d02e26ee05f753c93ebb6d17b77245d0f8d109f85d7ecf3d8add965ea301a9dcb3fef2dde96841"}}, 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x4)
remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x80000b, 0xff, 0x2)

00:32:51 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x1, 0x101, 0x1)

00:32:51 executing program 1:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=0x4)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x280, 0x1, {0x0, 0xea60}, {0x0, 0x2710}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x33, 0x3, 0x0, 0x0, "82f7c89b6b283b72a6790ab1b5bbdd79436d8cb556832c2e03d02e26ee05f753c93ebb6d17b77245d0f8d109f85d7ecf3d8add965ea301a9dcb3fef2dde96841"}}, 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x4)
remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x80000b, 0xff, 0x2)

00:32:51 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=0x4)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x280, 0x1, {0x0, 0xea60}, {0x0, 0x2710}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x33, 0x3, 0x0, 0x0, "82f7c89b6b283b72a6790ab1b5bbdd79436d8cb556832c2e03d02e26ee05f753c93ebb6d17b77245d0f8d109f85d7ecf3d8add965ea301a9dcb3fef2dde96841"}}, 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x4)
remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x80000b, 0xff, 0x2)

00:32:51 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
r1 = socket(0xa, 0x4, 0x8)
recvmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
bind$802154_dgram(r2, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14)

00:32:51 executing program 1:
socket$nl_rdma(0x10, 0x3, 0x14)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0xb8f, 0x81, 0x7)

00:32:51 executing program 4:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0xc002, 0x0, 0x0, 0x0)

00:32:51 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x1, 0x101, 0x1)

00:32:51 executing program 1:
socket$nl_rdma(0x10, 0x3, 0x14)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0xb8f, 0x81, 0x7)

00:32:51 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=0x4)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x280, 0x1, {0x0, 0xea60}, {0x0, 0x2710}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x33, 0x3, 0x0, 0x0, "82f7c89b6b283b72a6790ab1b5bbdd79436d8cb556832c2e03d02e26ee05f753c93ebb6d17b77245d0f8d109f85d7ecf3d8add965ea301a9dcb3fef2dde96841"}}, 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x4)
remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x80000b, 0xff, 0x2)

00:32:51 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
mmap$binder(&(0x7f0000145000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xdd)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000f7000/0x1000)=nil, 0x1000}, 0x1})

00:32:51 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x1, 0x101, 0x1)

00:32:51 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x4481, 0x0)
socketpair(0x6, 0x5, 0x7, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r2, 0x1ff})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140c, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x20044040)
mmap$dsp(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0x40010, r0, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:32:51 executing program 1:
socket$nl_rdma(0x10, 0x3, 0x14)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xfe, 0x1)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0xb8f, 0x81, 0x7)

00:32:51 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=0x4)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x280, 0x1, {0x0, 0xea60}, {0x0, 0x2710}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x33, 0x3, 0x0, 0x0, "82f7c89b6b283b72a6790ab1b5bbdd79436d8cb556832c2e03d02e26ee05f753c93ebb6d17b77245d0f8d109f85d7ecf3d8add965ea301a9dcb3fef2dde96841"}}, 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x4)

00:32:51 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
r1 = socket(0xa, 0x4, 0x8)
recvmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
bind$802154_dgram(r2, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14)

00:32:51 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x101, 0x1)

00:32:51 executing program 2:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munlock(&(0x7f0000008000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:51 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000000), 0xff, 0x2)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00002d2000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\\^-/]\x00')

00:32:51 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

00:32:51 executing program 1:
socket$nl_rdma(0x10, 0x3, 0x14)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0xb8f, 0x81, 0x7)

00:32:51 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x101, 0x1)

00:32:52 executing program 2:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munlock(&(0x7f0000008000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:52 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x101, 0x1)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0xb8f, 0x81, 0x7)

00:32:52 executing program 2:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munlock(&(0x7f0000008000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:52 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
r1 = socket(0xa, 0x4, 0x8)
recvmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
bind$802154_dgram(r2, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14)

00:32:52 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0)

00:32:52 executing program 2:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "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"})
r4 = socket(0xa, 0x3, 0x8)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))

00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000), 0x101, 0x1)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0xb8f, 0x81, 0x7)

00:32:52 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x81, 0x7)

00:32:52 executing program 3:
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "925250be8e0030f08d912454fbf94e40b71a931421f63a96738397c9ed18c23fa1143c3e315dc2bc73988670befd0da2d2f8470342272e7bf1839fcaf6896c54a05dc1dec7fa33ba29b9b5f9d03329e8e9c251f2966b9b97f2f9c045cb6d6138ef012334c5cd2bc3aefc08753944b986913c8cb53cf627bd9169f2f56ceda8065488cca29224bb9683ae9d9c285943c4cc8d87d19e356d1e94d96b002f9b75ec17272efed01f72d277363ec324048ab19f4ba369be5f73b4911849c91e10fc263af59a0a82dcf4c817841bb47cdffc48246788c4de459cba3d534147b985525f3087fec541ad07473a639ac9fa6170d34ed700f0cfd9a8e379fe670fddbfafd73286dc523c6db4235c1306021d8c1751ea5a9c3f633efbd19eedfa3a9374d38ac4211db250ad0bf23b1fb448e0e4ef6358abbb3560ed7eeda4e6c38740e454432210c75b64d7833837adeffede89dcf3894ef5ccd8ca1c5482c4b49419083d57f8dc3fd3439e9ccb04b1e3f676f5132e5bb0e521668d1feb07fb7f41732a4d8478466ec132c676ea83d8dedb52a86c999cc0834dfd4316749d4ea161f13995eecda87251def0e419392d7ff7b7f15ce0159c13793e4e6c891c5b1409568b461e3e389f3f546aae9407d575dac7416d5aef7f000ac493fd61d0a624e724854e736df05861d9a85db5d8110597869275227e5c5681b23e1572055e128552718ba2"})
r4 = socket(0xa, 0x3, 0x8)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x81, 0x7)

00:32:52 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:52 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "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"})
r4 = socket(0xa, 0x3, 0x8)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))

00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000), 0x101, 0x1)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x81, 0x7)

00:32:52 executing program 3:
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "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"})
r4 = socket(0xa, 0x3, 0x8)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))

00:32:52 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x7)

00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000), 0x101, 0x1)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "925250be8e0030f08d912454fbf94e40b71a931421f63a96738397c9ed18c23fa1143c3e315dc2bc73988670befd0da2d2f8470342272e7bf1839fcaf6896c54a05dc1dec7fa33ba29b9b5f9d03329e8e9c251f2966b9b97f2f9c045cb6d6138ef012334c5cd2bc3aefc08753944b986913c8cb53cf627bd9169f2f56ceda8065488cca29224bb9683ae9d9c285943c4cc8d87d19e356d1e94d96b002f9b75ec17272efed01f72d277363ec324048ab19f4ba369be5f73b4911849c91e10fc263af59a0a82dcf4c817841bb47cdffc48246788c4de459cba3d534147b985525f3087fec541ad07473a639ac9fa6170d34ed700f0cfd9a8e379fe670fddbfafd73286dc523c6db4235c1306021d8c1751ea5a9c3f633efbd19eedfa3a9374d38ac4211db250ad0bf23b1fb448e0e4ef6358abbb3560ed7eeda4e6c38740e454432210c75b64d7833837adeffede89dcf3894ef5ccd8ca1c5482c4b49419083d57f8dc3fd3439e9ccb04b1e3f676f5132e5bb0e521668d1feb07fb7f41732a4d8478466ec132c676ea83d8dedb52a86c999cc0834dfd4316749d4ea161f13995eecda87251def0e419392d7ff7b7f15ce0159c13793e4e6c891c5b1409568b461e3e389f3f546aae9407d575dac7416d5aef7f000ac493fd61d0a624e724854e736df05861d9a85db5d8110597869275227e5c5681b23e1572055e128552718ba2"})
socket(0xa, 0x3, 0x8)

00:32:52 executing program 3:
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:52 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x7)

00:32:52 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "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"})
r4 = socket(0xa, 0x3, 0x8)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))

00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x0, 0x1)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x7)

00:32:52 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:52 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x7)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:52 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:52 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "925250be8e0030f08d912454fbf94e40b71a931421f63a96738397c9ed18c23fa1143c3e315dc2bc73988670befd0da2d2f8470342272e7bf1839fcaf6896c54a05dc1dec7fa33ba29b9b5f9d03329e8e9c251f2966b9b97f2f9c045cb6d6138ef012334c5cd2bc3aefc08753944b986913c8cb53cf627bd9169f2f56ceda8065488cca29224bb9683ae9d9c285943c4cc8d87d19e356d1e94d96b002f9b75ec17272efed01f72d277363ec324048ab19f4ba369be5f73b4911849c91e10fc263af59a0a82dcf4c817841bb47cdffc48246788c4de459cba3d534147b985525f3087fec541ad07473a639ac9fa6170d34ed700f0cfd9a8e379fe670fddbfafd73286dc523c6db4235c1306021d8c1751ea5a9c3f633efbd19eedfa3a9374d38ac4211db250ad0bf23b1fb448e0e4ef6358abbb3560ed7eeda4e6c38740e454432210c75b64d7833837adeffede89dcf3894ef5ccd8ca1c5482c4b49419083d57f8dc3fd3439e9ccb04b1e3f676f5132e5bb0e521668d1feb07fb7f41732a4d8478466ec132c676ea83d8dedb52a86c999cc0834dfd4316749d4ea161f13995eecda87251def0e419392d7ff7b7f15ce0159c13793e4e6c891c5b1409568b461e3e389f3f546aae9407d575dac7416d5aef7f000ac493fd61d0a624e724854e736df05861d9a85db5d8110597869275227e5c5681b23e1572055e128552718ba2"})
r4 = socket(0xa, 0x3, 0x8)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))

00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x0, 0x1)

00:32:52 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r0, 0x4801)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "925250be8e0030f08d912454fbf94e40b71a931421f63a96738397c9ed18c23fa1143c3e315dc2bc73988670befd0da2d2f8470342272e7bf1839fcaf6896c54a05dc1dec7fa33ba29b9b5f9d03329e8e9c251f2966b9b97f2f9c045cb6d6138ef012334c5cd2bc3aefc08753944b986913c8cb53cf627bd9169f2f56ceda8065488cca29224bb9683ae9d9c285943c4cc8d87d19e356d1e94d96b002f9b75ec17272efed01f72d277363ec324048ab19f4ba369be5f73b4911849c91e10fc263af59a0a82dcf4c817841bb47cdffc48246788c4de459cba3d534147b985525f3087fec541ad07473a639ac9fa6170d34ed700f0cfd9a8e379fe670fddbfafd73286dc523c6db4235c1306021d8c1751ea5a9c3f633efbd19eedfa3a9374d38ac4211db250ad0bf23b1fb448e0e4ef6358abbb3560ed7eeda4e6c38740e454432210c75b64d7833837adeffede89dcf3894ef5ccd8ca1c5482c4b49419083d57f8dc3fd3439e9ccb04b1e3f676f5132e5bb0e521668d1feb07fb7f41732a4d8478466ec132c676ea83d8dedb52a86c999cc0834dfd4316749d4ea161f13995eecda87251def0e419392d7ff7b7f15ce0159c13793e4e6c891c5b1409568b461e3e389f3f546aae9407d575dac7416d5aef7f000ac493fd61d0a624e724854e736df05861d9a85db5d8110597869275227e5c5681b23e1572055e128552718ba2"})

00:32:52 executing program 2:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x3)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:52 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "925250be8e0030f08d912454fbf94e40b71a931421f63a96738397c9ed18c23fa1143c3e315dc2bc73988670befd0da2d2f8470342272e7bf1839fcaf6896c54a05dc1dec7fa33ba29b9b5f9d03329e8e9c251f2966b9b97f2f9c045cb6d6138ef012334c5cd2bc3aefc08753944b986913c8cb53cf627bd9169f2f56ceda8065488cca29224bb9683ae9d9c285943c4cc8d87d19e356d1e94d96b002f9b75ec17272efed01f72d277363ec324048ab19f4ba369be5f73b4911849c91e10fc263af59a0a82dcf4c817841bb47cdffc48246788c4de459cba3d534147b985525f3087fec541ad07473a639ac9fa6170d34ed700f0cfd9a8e379fe670fddbfafd73286dc523c6db4235c1306021d8c1751ea5a9c3f633efbd19eedfa3a9374d38ac4211db250ad0bf23b1fb448e0e4ef6358abbb3560ed7eeda4e6c38740e454432210c75b64d7833837adeffede89dcf3894ef5ccd8ca1c5482c4b49419083d57f8dc3fd3439e9ccb04b1e3f676f5132e5bb0e521668d1feb07fb7f41732a4d8478466ec132c676ea83d8dedb52a86c999cc0834dfd4316749d4ea161f13995eecda87251def0e419392d7ff7b7f15ce0159c13793e4e6c891c5b1409568b461e3e389f3f546aae9407d575dac7416d5aef7f000ac493fd61d0a624e724854e736df05861d9a85db5d8110597869275227e5c5681b23e1572055e128552718ba2"})
socket(0xa, 0x3, 0x8)

00:32:52 executing program 3:
mbind(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000040), 0xff, 0x2)
getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)

00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x0, 0x1)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (fail_nth: 1)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "925250be8e0030f08d912454fbf94e40b71a931421f63a96738397c9ed18c23fa1143c3e315dc2bc73988670befd0da2d2f8470342272e7bf1839fcaf6896c54a05dc1dec7fa33ba29b9b5f9d03329e8e9c251f2966b9b97f2f9c045cb6d6138ef012334c5cd2bc3aefc08753944b986913c8cb53cf627bd9169f2f56ceda8065488cca29224bb9683ae9d9c285943c4cc8d87d19e356d1e94d96b002f9b75ec17272efed01f72d277363ec324048ab19f4ba369be5f73b4911849c91e10fc263af59a0a82dcf4c817841bb47cdffc48246788c4de459cba3d534147b985525f3087fec541ad07473a639ac9fa6170d34ed700f0cfd9a8e379fe670fddbfafd73286dc523c6db4235c1306021d8c1751ea5a9c3f633efbd19eedfa3a9374d38ac4211db250ad0bf23b1fb448e0e4ef6358abbb3560ed7eeda4e6c38740e454432210c75b64d7833837adeffede89dcf3894ef5ccd8ca1c5482c4b49419083d57f8dc3fd3439e9ccb04b1e3f676f5132e5bb0e521668d1feb07fb7f41732a4d8478466ec132c676ea83d8dedb52a86c999cc0834dfd4316749d4ea161f13995eecda87251def0e419392d7ff7b7f15ce0159c13793e4e6c891c5b1409568b461e3e389f3f546aae9407d575dac7416d5aef7f000ac493fd61d0a624e724854e736df05861d9a85db5d8110597869275227e5c5681b23e1572055e128552718ba2"})

00:32:52 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:52 executing program 2:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r0, 0x4801)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mmap$binder(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x80000001)

00:32:52 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (fail_nth: 1)

00:32:52 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r2 = syz_open_pts(r0, 0x4801)
ioctl$TIOCCONS(r2, 0x541d)

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async)
mmap$binder(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x80000001)

00:32:52 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (fail_nth: 1)

00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (fail_nth: 1)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:52 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r0, 0x4801)

[ 1954.521073] FAULT_INJECTION: forcing a failure.
[ 1954.521073] name failslab, interval 1, probability 0, space 0, times 0
[ 1954.536594] FAULT_INJECTION: forcing a failure.
[ 1954.536594] name failslab, interval 1, probability 0, space 0, times 0
[ 1954.543352] CPU: 0 PID: 14996 Comm: syz-executor.2 Not tainted 4.14.293-syzkaller #0
[ 1954.555682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1954.565032] Call Trace:
[ 1954.567611]  dump_stack+0x1b2/0x281
[ 1954.571232]  should_fail.cold+0x10a/0x149
[ 1954.575552]  should_failslab+0xd6/0x130
[ 1954.579535]  kmem_cache_alloc+0x28e/0x3c0
[ 1954.583683]  __split_vma+0xc8/0x6c0
[ 1954.587304]  do_munmap+0xa00/0xc30
[ 1954.590848]  SyS_mremap+0x877/0xd70
[ 1954.594470]  ? __mutex_unlock_slowpath+0x75/0x770
[ 1954.599299]  ? move_page_tables+0x60/0x60
[ 1954.603445]  ? wait_for_common_io.constprop.0+0x360/0x390
[ 1954.608979]  ? vfs_write+0x319/0x4d0
[ 1954.612692]  ? fput_many+0xe/0x140
[ 1954.616242]  ? SyS_write+0x14d/0x210
[ 1954.619943]  ? SyS_read+0x210/0x210
[ 1954.623556]  ? __do_page_fault+0x159/0xad0
[ 1954.627776]  ? do_syscall_64+0x4c/0x640
[ 1954.631743]  ? move_page_tables+0x60/0x60
[ 1954.635883]  do_syscall_64+0x1d5/0x640
[ 1954.639760]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1954.644935] RIP: 0033:0x7fa0e11c8409
[ 1954.648627] RSP: 002b:00007fa0dfb3d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 1954.656434] RAX: ffffffffffffffda RBX: 00007fa0e12daf80 RCX: 00007fa0e11c8409
[ 1954.663687] RDX: 0000000000003000 RSI: 0000000000004000 RDI: 0000000020006000
[ 1954.670941] RBP: 00007fa0dfb3d1d0 R08: 0000000020000000 R09: 0000000000000000
[ 1954.678206] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1954.685478] R13: 00007ffee4a49e2f R14: 00007fa0dfb3d300 R15: 0000000000022000
[ 1954.693359] CPU: 1 PID: 14999 Comm: syz-executor.5 Not tainted 4.14.293-syzkaller #0
[ 1954.701251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1954.710607] Call Trace:
[ 1954.713208]  dump_stack+0x1b2/0x281
[ 1954.716844]  should_fail.cold+0x10a/0x149
[ 1954.720998]  should_failslab+0xd6/0x130
[ 1954.724983]  kmem_cache_alloc+0x28e/0x3c0
[ 1954.729135]  mpol_new+0x151/0x2b0
[ 1954.732591]  SyS_mbind+0x211/0xb40
[ 1954.736137]  ? vfs_write+0x319/0x4d0
[ 1954.739851]  ? __mpol_dup+0x440/0x440
[ 1954.744014]  ? SyS_write+0x14d/0x210
[ 1954.747732]  ? SyS_read+0x210/0x210
[ 1954.751362]  ? __do_page_fault+0x159/0xad0
[ 1954.755601]  ? do_syscall_64+0x4c/0x640
[ 1954.759582]  ? __mpol_dup+0x440/0x440
[ 1954.763385]  do_syscall_64+0x1d5/0x640
00:32:52 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:52 executing program 3:
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
shmat(0xffffffffffffffff, &(0x7f0000006000/0x3000)=nil, 0x2000)
userfaultfd(0x800)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000007000/0x3000)=nil, 0x3000}, 0x3})

00:32:52 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mmap$binder(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x80000001)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async)
mmap$binder(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x80000001) (async)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:52 executing program 3:
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
shmat(0xffffffffffffffff, &(0x7f0000006000/0x3000)=nil, 0x2000) (async)
userfaultfd(0x800) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000007000/0x3000)=nil, 0x3000}, 0x3})

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:52 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (fail_nth: 2)

00:32:52 executing program 3:
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
shmat(0xffffffffffffffff, &(0x7f0000006000/0x3000)=nil, 0x2000)
userfaultfd(0x800) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000007000/0x3000)=nil, 0x3000}, 0x3})

[ 1954.767281]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1954.772571] RIP: 0033:0x7fa864dc0409
[ 1954.776294] RSP: 002b:00007fa863735168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1954.784090] RAX: ffffffffffffffda RBX: 00007fa864ed2f80 RCX: 00007fa864dc0409
[ 1954.791365] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000020222000
[ 1954.798637] RBP: 00007fa8637351d0 R08: 0000000000000101 R09: 0000000000000000
[ 1954.805904] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[ 1954.813173] R13: 00007ffdffe109ff R14: 00007fa863735300 R15: 0000000000022000
00:32:52 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (fail_nth: 2)

00:32:52 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:52 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:52 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mmap$dsp(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003)

00:32:53 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x4, 0x10081, 0x2)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000382000/0x4000)=nil, 0x4000, &(0x7f0000000040)='*(^\x00')
mmap$usbfs(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x88b9)

[ 1954.830218] FAULT_INJECTION: forcing a failure.
[ 1954.830218] name failslab, interval 1, probability 0, space 0, times 0
00:32:53 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
syz_open_dev$ptys(0xc, 0x3, 0x0)

[ 1954.887231] CPU: 0 PID: 15022 Comm: syz-executor.2 Not tainted 4.14.293-syzkaller #0
[ 1954.895139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1954.904500] Call Trace:
[ 1954.907219]  dump_stack+0x1b2/0x281
[ 1954.910855]  should_fail.cold+0x10a/0x149
[ 1954.914919] FAULT_INJECTION: forcing a failure.
[ 1954.914919] name failslab, interval 1, probability 0, space 0, times 0
[ 1954.915004]  should_failslab+0xd6/0x130
[ 1954.930321]  kmem_cache_alloc+0x28e/0x3c0
00:32:53 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

[ 1954.934480]  __split_vma+0xc8/0x6c0
[ 1954.938113]  do_munmap+0x25b/0xc30
[ 1954.941657]  SyS_mremap+0xb01/0xd70
[ 1954.945303]  ? __mutex_unlock_slowpath+0x75/0x770
[ 1954.950155]  ? move_page_tables+0x60/0x60
[ 1954.954307]  ? wait_for_common_io.constprop.0+0x360/0x390
[ 1954.959833]  ? vfs_write+0x319/0x4d0
[ 1954.963540]  ? fput_many+0xe/0x140
[ 1954.967074]  ? SyS_write+0x14d/0x210
[ 1954.970779]  ? SyS_read+0x210/0x210
[ 1954.974405]  ? __do_page_fault+0x159/0xad0
[ 1954.978635]  ? do_syscall_64+0x4c/0x640
[ 1954.982596]  ? move_page_tables+0x60/0x60
00:32:53 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
syz_open_dev$ptys(0xc, 0x3, 0x0)

[ 1954.986738]  do_syscall_64+0x1d5/0x640
[ 1954.990625]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1954.995809] RIP: 0033:0x7fa0e11c8409
[ 1954.999632] RSP: 002b:00007fa0dfb3d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 1955.007331] RAX: ffffffffffffffda RBX: 00007fa0e12daf80 RCX: 00007fa0e11c8409
[ 1955.014591] RDX: 0000000000003000 RSI: 0000000000004000 RDI: 0000000020006000
[ 1955.021852] RBP: 00007fa0dfb3d1d0 R08: 0000000020000000 R09: 0000000000000000
[ 1955.029111] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1955.036370] R13: 00007ffee4a49e2f R14: 00007fa0dfb3d300 R15: 0000000000022000
[ 1955.043640] CPU: 1 PID: 15034 Comm: syz-executor.5 Not tainted 4.14.293-syzkaller #0
[ 1955.051528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1955.060880] Call Trace:
[ 1955.063475]  dump_stack+0x1b2/0x281
[ 1955.067112]  should_fail.cold+0x10a/0x149
[ 1955.071275]  should_failslab+0xd6/0x130
[ 1955.075252]  kmem_cache_alloc+0x28e/0x3c0
[ 1955.079402]  __split_vma+0xc8/0x6c0
[ 1955.083032]  ? change_prot_numa+0x70/0x70
00:32:53 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mmap$dsp(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
mmap$dsp(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003) (async)

00:32:53 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x54, "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"})

[ 1955.087181]  split_vma+0x85/0xc0
[ 1955.090557]  SyS_mbind+0x82d/0xb40
[ 1955.094101]  ? vfs_write+0x319/0x4d0
[ 1955.097813]  ? __mpol_dup+0x440/0x440
[ 1955.101612]  ? SyS_write+0x14d/0x210
[ 1955.105330]  ? SyS_read+0x210/0x210
[ 1955.108966]  ? __do_page_fault+0x159/0xad0
[ 1955.113199]  ? do_syscall_64+0x4c/0x640
[ 1955.117170]  ? __mpol_dup+0x440/0x440
[ 1955.120979]  do_syscall_64+0x1d5/0x640
[ 1955.124884]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1955.130060] RIP: 0033:0x7fa864dc0409
00:32:53 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (fail_nth: 3)

00:32:53 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:53 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (fail_nth: 3)

00:32:53 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
mmap$dsp(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003)

00:32:53 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x4, 0x10081, 0x2) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000382000/0x4000)=nil, 0x4000, &(0x7f0000000040)='*(^\x00')
mmap$usbfs(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x88b9)

00:32:53 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
syz_open_dev$ptys(0xc, 0x3, 0x0)

[ 1955.133751] RSP: 002b:00007fa863735168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1955.141442] RAX: ffffffffffffffda RBX: 00007fa864ed2f80 RCX: 00007fa864dc0409
[ 1955.148714] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000020222000
[ 1955.155966] RBP: 00007fa8637351d0 R08: 0000000000000101 R09: 0000000000000000
[ 1955.163225] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[ 1955.170481] R13: 00007ffdffe109ff R14: 00007fa863735300 R15: 0000000000022000
00:32:53 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:53 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
syz_open_dev$ptys(0xc, 0x3, 0x0)

[ 1955.216659] FAULT_INJECTION: forcing a failure.
[ 1955.216659] name failslab, interval 1, probability 0, space 0, times 0
[ 1955.250368] FAULT_INJECTION: forcing a failure.
[ 1955.250368] name failslab, interval 1, probability 0, space 0, times 0
[ 1955.250492] CPU: 1 PID: 15057 Comm: syz-executor.2 Not tainted 4.14.293-syzkaller #0
[ 1955.269464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1955.278816] Call Trace:
[ 1955.281405]  dump_stack+0x1b2/0x281
[ 1955.285034]  should_fail.cold+0x10a/0x149
[ 1955.289186]  should_failslab+0xd6/0x130
[ 1955.293154]  kmem_cache_alloc+0x28e/0x3c0
[ 1955.297286]  __split_vma+0xc8/0x6c0
[ 1955.300914]  do_munmap+0x2bc/0xc30
[ 1955.304452]  SyS_mremap+0xb01/0xd70
[ 1955.308088]  ? __mutex_unlock_slowpath+0x75/0x770
[ 1955.312925]  ? move_page_tables+0x60/0x60
[ 1955.317079]  ? wait_for_common_io.constprop.0+0x360/0x390
[ 1955.322602]  ? vfs_write+0x319/0x4d0
[ 1955.326303]  ? fput_many+0xe/0x140
[ 1955.329839]  ? SyS_write+0x14d/0x210
[ 1955.333538]  ? SyS_read+0x210/0x210
[ 1955.337151]  ? __do_page_fault+0x159/0xad0
[ 1955.341375]  ? do_syscall_64+0x4c/0x640
[ 1955.345345]  ? move_page_tables+0x60/0x60
[ 1955.349490]  do_syscall_64+0x1d5/0x640
[ 1955.353375]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1955.358565] RIP: 0033:0x7fa0e11c8409
[ 1955.362264] RSP: 002b:00007fa0dfb3d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 1955.369956] RAX: ffffffffffffffda RBX: 00007fa0e12daf80 RCX: 00007fa0e11c8409
[ 1955.377219] RDX: 0000000000003000 RSI: 0000000000004000 RDI: 0000000020006000
[ 1955.384482] RBP: 00007fa0dfb3d1d0 R08: 0000000020000000 R09: 0000000000000000
[ 1955.391736] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1955.398988] R13: 00007ffee4a49e2f R14: 00007fa0dfb3d300 R15: 0000000000022000
[ 1955.406259] CPU: 0 PID: 15068 Comm: syz-executor.5 Not tainted 4.14.293-syzkaller #0
[ 1955.414151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1955.423505] Call Trace:
[ 1955.426096]  dump_stack+0x1b2/0x281
[ 1955.429728]  should_fail.cold+0x10a/0x149
[ 1955.433886]  should_failslab+0xd6/0x130
[ 1955.437867]  kmem_cache_alloc+0x40/0x3c0
[ 1955.441939]  anon_vma_clone+0xd6/0x580
[ 1955.445833]  __split_vma+0x282/0x6c0
[ 1955.449542]  ? change_prot_numa+0x70/0x70
[ 1955.453695]  split_vma+0x85/0xc0
[ 1955.457063]  SyS_mbind+0x82d/0xb40
[ 1955.460608]  ? vfs_write+0x319/0x4d0
[ 1955.464320]  ? __mpol_dup+0x440/0x440
00:32:53 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x4, 0x10081, 0x2) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000382000/0x4000)=nil, 0x4000, &(0x7f0000000040)='*(^\x00') (async)
mmap$usbfs(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x88b9)

00:32:53 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x800001)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000})

00:32:53 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:53 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

[ 1955.468118]  ? SyS_write+0x14d/0x210
[ 1955.471834]  ? SyS_read+0x210/0x210
[ 1955.475459]  ? __do_page_fault+0x159/0xad0
[ 1955.479711]  ? do_syscall_64+0x4c/0x640
[ 1955.483695]  ? __mpol_dup+0x440/0x440
[ 1955.487495]  do_syscall_64+0x1d5/0x640
[ 1955.491386]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1955.496674] RIP: 0033:0x7fa864dc0409
[ 1955.500375] RSP: 002b:00007fa863735168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1955.508090] RAX: ffffffffffffffda RBX: 00007fa864ed2f80 RCX: 00007fa864dc0409
00:32:53 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (fail_nth: 4)

00:32:53 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x800001) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000})

[ 1955.515361] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000020222000
[ 1955.522728] RBP: 00007fa8637351d0 R08: 0000000000000101 R09: 0000000000000000
[ 1955.530002] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[ 1955.537273] R13: 00007ffdffe109ff R14: 00007fa863735300 R15: 0000000000022000
00:32:53 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (fail_nth: 4)

00:32:53 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:53 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1401, 0x10, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
pkey_mprotect(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff)

00:32:53 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:53 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x800001)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x800001) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) (async)

[ 1955.564359] FAULT_INJECTION: forcing a failure.
[ 1955.564359] name failslab, interval 1, probability 0, space 0, times 0
[ 1955.587502] CPU: 1 PID: 15085 Comm: syz-executor.2 Not tainted 4.14.293-syzkaller #0
[ 1955.595403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1955.604766] Call Trace:
[ 1955.607362]  dump_stack+0x1b2/0x281
[ 1955.611007]  should_fail.cold+0x10a/0x149
[ 1955.615161]  should_failslab+0xd6/0x130
[ 1955.615451] FAULT_INJECTION: forcing a failure.
[ 1955.615451] name failslab, interval 1, probability 0, space 0, times 0
[ 1955.619144]  kmem_cache_alloc+0x28e/0x3c0
[ 1955.619158]  __split_vma+0xc8/0x6c0
[ 1955.619171]  do_munmap+0x25b/0xc30
[ 1955.619185]  move_vma+0x4e3/0x800
[ 1955.619201]  ? move_page_tables.part.0+0x17d0/0x17d0
[ 1955.650217]  ? cap_mmap_addr+0x42/0x2d0
[ 1955.654209]  ? arch_get_unmapped_area+0x800/0x800
[ 1955.659056]  ? security_mmap_addr+0x73/0xa0
[ 1955.663383]  SyS_mremap+0x9e9/0xd70
[ 1955.667019]  ? __mutex_unlock_slowpath+0x75/0x770
[ 1955.671861]  ? move_page_tables+0x60/0x60
[ 1955.676136]  ? wait_for_common_io.constprop.0+0x360/0x390
[ 1955.681780]  ? vfs_write+0x319/0x4d0
[ 1955.685488]  ? fput_many+0xe/0x140
[ 1955.689026]  ? SyS_write+0x14d/0x210
[ 1955.692743]  ? SyS_read+0x210/0x210
[ 1955.696372]  ? __do_page_fault+0x159/0xad0
[ 1955.700614]  ? do_syscall_64+0x4c/0x640
[ 1955.704590]  ? move_page_tables+0x60/0x60
[ 1955.708738]  do_syscall_64+0x1d5/0x640
[ 1955.712720]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
00:32:53 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1401, 0x10, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async, rerun: 32)
pkey_mprotect(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) (rerun: 32)

00:32:53 executing program 0:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0x39, 0x4})
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfffd, 0x5, 0xbb6, 0x3f})
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:53 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1401, 0x10, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
pkey_mprotect(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff)

00:32:53 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (fail_nth: 1)

[ 1955.717906] RIP: 0033:0x7fa0e11c8409
[ 1955.721607] RSP: 002b:00007fa0dfb3d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 1955.722645] FAULT_INJECTION: forcing a failure.
[ 1955.722645] name failslab, interval 1, probability 0, space 0, times 0
[ 1955.729309] RAX: ffffffffffffffda RBX: 00007fa0e12daf80 RCX: 00007fa0e11c8409
[ 1955.729315] RDX: 0000000000003000 RSI: 0000000000004000 RDI: 0000000020006000
[ 1955.729319] RBP: 00007fa0dfb3d1d0 R08: 0000000020000000 R09: 0000000000000000
00:32:53 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, r1, 0xfc000)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0)
mmap$usbfs(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x80000000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000121402002cbd00000008004f00000000000800030004000000080003000400000008004b001300000008004b001300000008004b0013000000", @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x6004855}, 0x0)

00:32:53 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (fail_nth: 5)

00:32:53 executing program 3:
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000006000/0x2000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

[ 1955.729324] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1955.729328] R13: 00007ffee4a49e2f R14: 00007fa0dfb3d300 R15: 0000000000022000
[ 1955.790590] CPU: 0 PID: 15095 Comm: syz-executor.5 Not tainted 4.14.293-syzkaller #0
[ 1955.798498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1955.807976] Call Trace:
[ 1955.810571]  dump_stack+0x1b2/0x281
[ 1955.814210]  should_fail.cold+0x10a/0x149
[ 1955.818361]  should_failslab+0xd6/0x130
[ 1955.822339]  kmem_cache_alloc+0x28e/0x3c0
[ 1955.826491]  __split_vma+0xc8/0x6c0
[ 1955.830131]  split_vma+0x85/0xc0
[ 1955.833498]  SyS_mbind+0x87e/0xb40
[ 1955.837045]  ? vfs_write+0x319/0x4d0
[ 1955.840753]  ? __mpol_dup+0x440/0x440
[ 1955.844540]  ? SyS_write+0x14d/0x210
[ 1955.848241]  ? SyS_read+0x210/0x210
[ 1955.851872]  ? __do_page_fault+0x159/0xad0
[ 1955.856100]  ? do_syscall_64+0x4c/0x640
[ 1955.860077]  ? __mpol_dup+0x440/0x440
[ 1955.863869]  do_syscall_64+0x1d5/0x640
[ 1955.867757]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1955.872932] RIP: 0033:0x7fa864dc0409
[ 1955.876636] RSP: 002b:00007fa863735168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1955.884334] RAX: ffffffffffffffda RBX: 00007fa864ed2f80 RCX: 00007fa864dc0409
[ 1955.891589] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000020222000
[ 1955.898845] RBP: 00007fa8637351d0 R08: 0000000000000101 R09: 0000000000000000
[ 1955.906098] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[ 1955.913352] R13: 00007ffdffe109ff R14: 00007fa863735300 R15: 0000000000022000
[ 1955.920799] CPU: 1 PID: 15106 Comm: syz-executor.0 Not tainted 4.14.293-syzkaller #0
[ 1955.928689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1955.938046] Call Trace:
[ 1955.940641]  dump_stack+0x1b2/0x281
[ 1955.944274]  should_fail.cold+0x10a/0x149
[ 1955.948421]  should_failslab+0xd6/0x130
[ 1955.952385]  kmem_cache_alloc+0x28e/0x3c0
[ 1955.956597]  getname_flags+0xc8/0x550
[ 1955.960380]  do_sys_open+0x1ce/0x410
[ 1955.964083]  ? filp_open+0x60/0x60
[ 1955.967609]  ? __do_page_fault+0x159/0xad0
[ 1955.971822]  ? do_syscall_64+0x4c/0x640
[ 1955.975773]  ? SyS_open+0x30/0x30
[ 1955.979228]  do_syscall_64+0x1d5/0x640
[ 1955.983101]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1955.988273] RIP: 0033:0x7f97cd3f1324
[ 1955.991967] RSP: 002b:00007f97cbdb2ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1955.999653] RAX: ffffffffffffffda RBX: 00007f97cd550f80 RCX: 00007f97cd3f1324
[ 1956.006901] RDX: 0000000000000002 RSI: 00007f97cbdb2d40 RDI: 00000000ffffff9c
00:32:54 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (fail_nth: 5)

00:32:54 executing program 4:
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "165f2e7418b0229e277a2d4e177789115e1c2b"})
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:54 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1410, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}}, 0x8000)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000012140008000100000000ffff00000004b3f500080001000100000008004b001300"/48], 0x30}, 0x1, 0x0, 0x0, 0x24000005}, 0x4c000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:54 executing program 3:
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000006000/0x2000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000006000/0x2000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:32:54 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
r0 = socket(0xa, 0x2, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, r1, 0xfc000) (async)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async)
mmap$usbfs(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x80000000) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000121402002cbd00000008004f00000000000800030004000000080003000400000008004b001300000008004b001300000008004b0013000000", @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x6004855}, 0x0)

00:32:54 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (fail_nth: 2)

[ 1956.014169] RBP: 00007f97cbdb2d40 R08: 0000000000000000 R09: 000000000000000e
[ 1956.021432] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1956.028697] R13: 00007ffc04d8cf1f R14: 00007f97cbdb3300 R15: 0000000000022000
00:32:54 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1410, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}}, 0x8000)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000012140008000100000000ffff00000004b3f500080001000100000008004b001300"/48], 0x30}, 0x1, 0x0, 0x0, 0x24000005}, 0x4c000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1410, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}}, 0x8000) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000012140008000100000000ffff00000004b3f500080001000100000008004b001300"/48], 0x30}, 0x1, 0x0, 0x0, 0x24000005}, 0x4c000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)

[ 1956.088240] FAULT_INJECTION: forcing a failure.
[ 1956.088240] name failslab, interval 1, probability 0, space 0, times 0
[ 1956.091058] FAULT_INJECTION: forcing a failure.
[ 1956.091058] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1956.110733] CPU: 0 PID: 15129 Comm: syz-executor.5 Not tainted 4.14.293-syzkaller #0
[ 1956.119110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1956.128491] Call Trace:
[ 1956.131072]  dump_stack+0x1b2/0x281
[ 1956.134685]  should_fail.cold+0x10a/0x149
[ 1956.138821]  should_failslab+0xd6/0x130
[ 1956.142781]  kmem_cache_alloc+0x40/0x3c0
[ 1956.146824]  anon_vma_clone+0xd6/0x580
[ 1956.150699]  __split_vma+0x282/0x6c0
[ 1956.154397]  split_vma+0x85/0xc0
[ 1956.157747]  SyS_mbind+0x87e/0xb40
[ 1956.161272]  ? vfs_write+0x319/0x4d0
[ 1956.164967]  ? __mpol_dup+0x440/0x440
[ 1956.168750]  ? SyS_write+0x14d/0x210
[ 1956.172461]  ? SyS_read+0x210/0x210
[ 1956.176079]  ? __do_page_fault+0x159/0xad0
[ 1956.180296]  ? do_syscall_64+0x4c/0x640
[ 1956.184251]  ? __mpol_dup+0x440/0x440
[ 1956.188051]  do_syscall_64+0x1d5/0x640
[ 1956.191927]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1956.197101] RIP: 0033:0x7fa864dc0409
[ 1956.200791] RSP: 002b:00007fa863735168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1956.208478] RAX: ffffffffffffffda RBX: 00007fa864ed2f80 RCX: 00007fa864dc0409
[ 1956.215727] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000020222000
[ 1956.222980] RBP: 00007fa8637351d0 R08: 0000000000000101 R09: 0000000000000000
[ 1956.230243] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
00:32:54 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (fail_nth: 6)

[ 1956.237511] R13: 00007ffdffe109ff R14: 00007fa863735300 R15: 0000000000022000
[ 1956.244784] CPU: 1 PID: 15130 Comm: syz-executor.0 Not tainted 4.14.293-syzkaller #0
[ 1956.252670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1956.262025] Call Trace:
[ 1956.264616]  dump_stack+0x1b2/0x281
[ 1956.268253]  should_fail.cold+0x10a/0x149
[ 1956.272406]  __alloc_pages_nodemask+0x22c/0x2720
[ 1956.277165]  ? lock_downgrade+0x740/0x740
[ 1956.281323]  ? __lock_acquire+0x5fc/0x3f20
[ 1956.285562]  ? get_pid_task+0x91/0x130
[ 1956.286387] FAULT_INJECTION: forcing a failure.
[ 1956.286387] name failslab, interval 1, probability 0, space 0, times 0
[ 1956.289453]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 1956.289467]  ? lock_downgrade+0x740/0x740
[ 1956.289481]  ? get_pid_task+0xb8/0x130
[ 1956.289491]  ? proc_fail_nth_write+0x7b/0x180
[ 1956.289505]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1956.322887]  cache_grow_begin+0x91/0x700
[ 1956.326934]  ? fs_reclaim_release+0xd0/0x110
[ 1956.331327]  ? check_preemption_disabled+0x35/0x240
[ 1956.336327]  cache_alloc_refill+0x273/0x350
[ 1956.340636]  kmem_cache_alloc+0x333/0x3c0
[ 1956.344768]  getname_flags+0xc8/0x550
[ 1956.348562]  do_sys_open+0x1ce/0x410
[ 1956.352260]  ? filp_open+0x60/0x60
[ 1956.355783]  ? __do_page_fault+0x159/0xad0
[ 1956.359999]  ? do_syscall_64+0x4c/0x640
[ 1956.363954]  ? SyS_open+0x30/0x30
[ 1956.367390]  do_syscall_64+0x1d5/0x640
[ 1956.371291]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1956.376466] RIP: 0033:0x7f97cd3f1324
[ 1956.380166] RSP: 002b:00007f97cbdb2ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1956.387862] RAX: ffffffffffffffda RBX: 00007f97cd550f80 RCX: 00007f97cd3f1324
[ 1956.395112] RDX: 0000000000000002 RSI: 00007f97cbdb2d40 RDI: 00000000ffffff9c
[ 1956.402367] RBP: 00007f97cbdb2d40 R08: 0000000000000000 R09: 000000000000000e
[ 1956.409621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1956.416877] R13: 00007ffc04d8cf1f R14: 00007f97cbdb3300 R15: 0000000000022000
[ 1956.424142] CPU: 0 PID: 15147 Comm: syz-executor.5 Not tainted 4.14.293-syzkaller #0
00:32:54 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1410, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}}, 0x8000) (async)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000012140008000100000000ffff00000004b3f500080001000100000008004b001300"/48], 0x30}, 0x1, 0x0, 0x0, 0x24000005}, 0x4c000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:54 executing program 2:
mremap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil)

[ 1956.432026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1956.441374] Call Trace:
[ 1956.443962]  dump_stack+0x1b2/0x281
[ 1956.447593]  should_fail.cold+0x10a/0x149
[ 1956.451749]  should_failslab+0xd6/0x130
[ 1956.455726]  kmem_cache_alloc+0x28e/0x3c0
[ 1956.459876]  __mpol_dup+0x62/0x440
[ 1956.463414]  ? new_page+0x220/0x220
[ 1956.467040]  ? split_vma+0x8d/0xc0
[ 1956.470576]  SyS_mbind+0x628/0xb40
[ 1956.474115]  ? vfs_write+0x319/0x4d0
[ 1956.477828]  ? __mpol_dup+0x440/0x440
[ 1956.481627]  ? SyS_write+0x14d/0x210
[ 1956.485338]  ? SyS_read+0x210/0x210
00:32:54 executing program 2:
mremap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil)

00:32:54 executing program 2:
mremap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil)

00:32:54 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
getuid()

[ 1956.488965]  ? __do_page_fault+0x159/0xad0
[ 1956.493196]  ? do_syscall_64+0x4c/0x640
[ 1956.497170]  ? __mpol_dup+0x440/0x440
[ 1956.500969]  do_syscall_64+0x1d5/0x640
[ 1956.504866]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1956.510051] RIP: 0033:0x7fa864dc0409
[ 1956.513755] RSP: 002b:00007fa863735168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1956.521469] RAX: ffffffffffffffda RBX: 00007fa864ed2f80 RCX: 00007fa864dc0409
[ 1956.528740] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000020222000
00:32:54 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, r1, 0xfc000)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0)
mmap$usbfs(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x80000000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000121402002cbd00000008004f00000000000800030004000000080003000400000008004b001300000008004b001300000008004b0013000000", @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x6004855}, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
socket(0xa, 0x2, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, r1, 0xfc000) (async)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async)
mmap$usbfs(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x80000000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) (async)
openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000121402002cbd00000008004f00000000000800030004000000080003000400000008004b001300000008004b001300000008004b0013000000", @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x6004855}, 0x0) (async)

00:32:54 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:54 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
getuid()

00:32:54 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (fail_nth: 3)

00:32:54 executing program 3:
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000006000/0x2000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:54 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (fail_nth: 7)

[ 1956.536005] RBP: 00007fa8637351d0 R08: 0000000000000101 R09: 0000000000000000
[ 1956.543281] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[ 1956.550553] R13: 00007ffdffe109ff R14: 00007fa863735300 R15: 0000000000022000
00:32:54 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
getuid()
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
getuid() (async)

00:32:54 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x827fa000)
syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x200)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil})

00:32:54 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:54 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:32:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0))
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000), 0x7, 0x0)

[ 1956.619198] FAULT_INJECTION: forcing a failure.
[ 1956.619198] name failslab, interval 1, probability 0, space 0, times 0
[ 1956.647337] CPU: 1 PID: 15170 Comm: syz-executor.0 Not tainted 4.14.293-syzkaller #0
[ 1956.655251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1956.664608] Call Trace:
00:32:54 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:32:54 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x827fa000)
syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x200) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil})

[ 1956.667200]  dump_stack+0x1b2/0x281
[ 1956.670841]  should_fail.cold+0x10a/0x149
[ 1956.674997]  should_failslab+0xd6/0x130
[ 1956.678976]  kmem_cache_alloc+0x28e/0x3c0
[ 1956.683129]  get_empty_filp+0x86/0x3f0
[ 1956.687023]  path_openat+0x84/0x2970
[ 1956.690740]  ? get_pid_task+0x91/0x130
[ 1956.694628]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 1956.699476]  ? path_lookupat+0x780/0x780
[ 1956.703556]  ? trace_hardirqs_on+0x10/0x10
[ 1956.707807]  do_filp_open+0x179/0x3c0
[ 1956.711659]  ? may_open_dev+0xe0/0xe0
[ 1956.715469]  ? __alloc_fd+0x1be/0x490
00:32:54 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x827fa000) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x200) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil})

00:32:54 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

[ 1956.719287]  ? lock_downgrade+0x740/0x740
[ 1956.723441]  ? do_raw_spin_unlock+0x164/0x220
[ 1956.727938]  ? _raw_spin_unlock+0x29/0x40
[ 1956.732099]  ? __alloc_fd+0x1be/0x490
[ 1956.735910]  do_sys_open+0x296/0x410
[ 1956.739628]  ? filp_open+0x60/0x60
[ 1956.743169]  ? __do_page_fault+0x159/0xad0
[ 1956.747408]  ? do_syscall_64+0x4c/0x640
[ 1956.751390]  ? SyS_open+0x30/0x30
[ 1956.754851]  do_syscall_64+0x1d5/0x640
[ 1956.758743]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1956.764028] RIP: 0033:0x7f97cd3f1324
00:32:54 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (fail_nth: 4)

00:32:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000), 0x7, 0x0)

00:32:54 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x1, 0x101, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000002c0)=""/1, 0x1}], 0x4, &(0x7f0000000540)=""/244, 0xf4}, 0x10000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)

00:32:54 executing program 3:
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1412, 0xb41, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000801)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:54 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:54 executing program 2:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000080)=""/4, 0x4}], 0x2, &(0x7f0000000340)=""/74, 0x4a}, 0x40000042)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28fa4976002c7bb005165f84a33efaff00", @ANYRES16=r0, @ANYBLOB="000827bd7000fbdbdf250200000014000900fc020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x4000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

[ 1956.767737] RSP: 002b:00007f97cbdb2ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1956.775446] RAX: ffffffffffffffda RBX: 00007f97cd550f80 RCX: 00007f97cd3f1324
[ 1956.782711] RDX: 0000000000000002 RSI: 00007f97cbdb2d40 RDI: 00000000ffffff9c
[ 1956.789967] RBP: 00007f97cbdb2d40 R08: 0000000000000000 R09: 000000000000000e
[ 1956.797220] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1956.804469] R13: 00007ffc04d8cf1f R14: 00007f97cbdb3300 R15: 0000000000022000
00:32:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0))
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000), 0x7, 0x0)
syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000), 0x7, 0x0) (async)

00:32:55 executing program 3:
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1412, 0xb41, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000801)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1412, 0xb41, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000801) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:32:55 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) (async)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000002c0)=""/1, 0x1}], 0x4, &(0x7f0000000540)=""/244, 0xf4}, 0x10000) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)

[ 1956.866302] FAULT_INJECTION: forcing a failure.
[ 1956.866302] name failslab, interval 1, probability 0, space 0, times 0
[ 1956.897491] CPU: 0 PID: 15219 Comm: syz-executor.0 Not tainted 4.14.293-syzkaller #0
[ 1956.905400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1956.914756] Call Trace:
[ 1956.917353]  dump_stack+0x1b2/0x281
[ 1956.921000]  should_fail.cold+0x10a/0x149
[ 1956.925151]  should_failslab+0xd6/0x130
[ 1956.929130]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1956.933804]  apparmor_file_alloc_security+0x129/0x800
[ 1956.939004]  security_file_alloc+0x66/0xa0
[ 1956.943235]  ? selinux_is_enabled+0x5/0x50
[ 1956.947471]  get_empty_filp+0x16b/0x3f0
[ 1956.951443]  path_openat+0x84/0x2970
[ 1956.955156]  ? get_pid_task+0x91/0x130
[ 1956.959045]  ? gfp_pfmemalloc_allowed+0x150/0x150
00:32:55 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:32:55 executing program 2:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000080)=""/4, 0x4}], 0x2, &(0x7f0000000340)=""/74, 0x4a}, 0x40000042)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28fa4976002c7bb005165f84a33efaff00", @ANYRES16=r0, @ANYBLOB="000827bd7000fbdbdf250200000014000900fc020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x4000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000080)=""/4, 0x4}], 0x2, &(0x7f0000000340)=""/74, 0x4a}, 0x40000042) (async)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28fa4976002c7bb005165f84a33efaff00", @ANYRES16=r0, @ANYBLOB="000827bd7000fbdbdf250200000014000900fc020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x4000) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)

00:32:55 executing program 3:
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1412, 0xb41, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000801) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

[ 1956.963884]  ? path_lookupat+0x780/0x780
[ 1956.967942]  ? trace_hardirqs_on+0x10/0x10
[ 1956.972184]  do_filp_open+0x179/0x3c0
[ 1956.975982]  ? may_open_dev+0xe0/0xe0
[ 1956.979799]  ? __alloc_fd+0x1be/0x490
[ 1956.983604]  ? lock_downgrade+0x740/0x740
[ 1956.987750]  ? do_raw_spin_unlock+0x164/0x220
[ 1956.992241]  ? _raw_spin_unlock+0x29/0x40
[ 1956.996386]  ? __alloc_fd+0x1be/0x490
[ 1957.000191]  do_sys_open+0x296/0x410
[ 1957.003905]  ? filp_open+0x60/0x60
[ 1957.007436]  ? __do_page_fault+0x159/0xad0
[ 1957.011649]  ? do_syscall_64+0x4c/0x640
[ 1957.015605]  ? SyS_open+0x30/0x30
[ 1957.019036]  do_syscall_64+0x1d5/0x640
[ 1957.022905]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1957.028071] RIP: 0033:0x7f97cd3f1324
[ 1957.031757] RSP: 002b:00007f97cbdb2ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1957.039440] RAX: ffffffffffffffda RBX: 00007f97cd550f80 RCX: 00007f97cd3f1324
[ 1957.046686] RDX: 0000000000000002 RSI: 00007f97cbdb2d40 RDI: 00000000ffffff9c
[ 1957.053933] RBP: 00007f97cbdb2d40 R08: 0000000000000000 R09: 000000000000000e
00:32:55 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (fail_nth: 5)

00:32:55 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000005000/0x2000)=nil)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/184, 0xb8, 0x0, &(0x7f00000000c0)}, &(0x7f0000000140)=0x40)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x600a40, 0x0)
mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd1c)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:55 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, 0x0)

00:32:55 executing program 2:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000080)=""/4, 0x4}], 0x2, &(0x7f0000000340)=""/74, 0x4a}, 0x40000042) (async)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28fa4976002c7bb005165f84a33efaff00", @ANYRES16=r0, @ANYBLOB="000827bd7000fbdbdf250200000014000900fc020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x4000) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) (async)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x1, 0x101, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000002c0)=""/1, 0x1}], 0x4, &(0x7f0000000540)=""/244, 0xf4}, 0x10000) (async, rerun: 64)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)

00:32:55 executing program 1:
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="f99301f9f9ed8690f7f2ed3b4a82a2c9", 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x3, 0x4)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:55 executing program 1:
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="f99301f9f9ed8690f7f2ed3b4a82a2c9", 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x3, 0x4)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

[ 1957.061179] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1957.068426] R13: 00007ffc04d8cf1f R14: 00007f97cbdb3300 R15: 0000000000022000
00:32:55 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000005000/0x2000)=nil)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/184, 0xb8, 0x0, &(0x7f00000000c0)}, &(0x7f0000000140)=0x40)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x600a40, 0x0)
mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd1c)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000005000/0x2000)=nil) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/184, 0xb8, 0x0, &(0x7f00000000c0)}, &(0x7f0000000140)=0x40) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x600a40, 0x0) (async)
mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd1c) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:32:55 executing program 4:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000080)=""/4, 0x4}], 0x2, &(0x7f0000000340)=""/74, 0x4a}, 0x40000042)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28fa4976002c7bb005165f84a33efaff00", @ANYRES16=r0, @ANYBLOB="000827bd7000fbdbdf250200000014000900fc020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x4000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 1:
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="f99301f9f9ed8690f7f2ed3b4a82a2c9", 0x10) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x3, 0x4) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

[ 1957.135227] FAULT_INJECTION: forcing a failure.
[ 1957.135227] name failslab, interval 1, probability 0, space 0, times 0
[ 1957.167644] CPU: 0 PID: 15260 Comm: syz-executor.0 Not tainted 4.14.293-syzkaller #0
[ 1957.175548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
00:32:55 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
remap_file_pages(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000000, 0x800, 0x1)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x4000)=nil, 0x4000})

00:32:55 executing program 4:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000080)=""/4, 0x4}], 0x2, &(0x7f0000000340)=""/74, 0x4a}, 0x40000042)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28fa4976002c7bb005165f84a33efaff00", @ANYRES16=r0, @ANYBLOB="000827bd7000fbdbdf250200000014000900fc020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x4000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

[ 1957.184899] Call Trace:
[ 1957.187489]  dump_stack+0x1b2/0x281
[ 1957.191125]  should_fail.cold+0x10a/0x149
[ 1957.195277]  should_failslab+0xd6/0x130
[ 1957.199257]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1957.203927]  ? trace_hardirqs_on+0x10/0x10
[ 1957.208166]  ? tty_kopen+0x1c0/0x1c0
[ 1957.211880]  tty_open+0x11a/0x8b0
[ 1957.215337]  ? lock_acquire+0x170/0x3f0
[ 1957.219314]  ? tty_kopen+0x1c0/0x1c0
[ 1957.223027]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[ 1957.229698]  ? tty_kopen+0x1c0/0x1c0
[ 1957.233406]  chrdev_open+0x23c/0x6d0
[ 1957.237120]  ? __register_chrdev+0x3d0/0x3d0
[ 1957.241538]  do_dentry_open+0x44b/0xec0
[ 1957.245545]  ? __register_chrdev+0x3d0/0x3d0
[ 1957.249952]  ? __inode_permission+0xcd/0x2f0
[ 1957.254365]  vfs_open+0x105/0x220
[ 1957.257825]  path_openat+0x628/0x2970
[ 1957.261638]  ? path_lookupat+0x780/0x780
[ 1957.265695]  ? trace_hardirqs_on+0x10/0x10
[ 1957.269935]  do_filp_open+0x179/0x3c0
[ 1957.273741]  ? may_open_dev+0xe0/0xe0
[ 1957.277536]  ? do_raw_spin_unlock+0x164/0x220
[ 1957.282022]  ? __alloc_fd+0x1be/0x490
[ 1957.285824]  do_sys_open+0x296/0x410
[ 1957.289529]  ? filp_open+0x60/0x60
[ 1957.293132]  ? __do_page_fault+0x159/0xad0
[ 1957.297345]  ? do_syscall_64+0x4c/0x640
[ 1957.301308]  ? SyS_open+0x30/0x30
[ 1957.304759]  do_syscall_64+0x1d5/0x640
[ 1957.308634]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1957.313802] RIP: 0033:0x7f97cd3f1324
[ 1957.317493] RSP: 002b:00007f97cbdb2ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1957.325181] RAX: ffffffffffffffda RBX: 00007f97cd550f80 RCX: 00007f97cd3f1324
00:32:55 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (fail_nth: 6)

00:32:55 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000005000/0x2000)=nil)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/184, 0xb8, 0x0, &(0x7f00000000c0)}, &(0x7f0000000140)=0x40)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x600a40, 0x0)
mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd1c)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:55 executing program 4:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000080)=""/4, 0x4}], 0x2, &(0x7f0000000340)=""/74, 0x4a}, 0x40000042)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28fa4976002c7bb005165f84a33efaff00", @ANYRES16=r0, @ANYBLOB="000827bd7000fbdbdf250200000014000900fc020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x4000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
remap_file_pages(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000000, 0x800, 0x1)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x4000)=nil, 0x4000})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
remap_file_pages(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000000, 0x800, 0x1) (async)
userfaultfd(0x1) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x4000)=nil, 0x4000}) (async)

00:32:55 executing program 5:
clock_getres(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000080)={0xffffffffffffff7f, 0x8b, 0x1, 0x7fffffffffffffbf, 0x8, 0xffffffff80000000, 0x7, 0x8000}, &(0x7f00000000c0)={0x6, 0xfff, 0x0, 0xffffffffffff4f1d, 0xfffffffffffffffd, 0x1, 0x8, 0x801}, &(0x7f0000000100)={0x6, 0x4000000000000927, 0x8000, 0x6, 0x4, 0x6, 0xb29, 0x2}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000200)={[0x1000]}, 0x8})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000221000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/211, 0xd3, 0x1, &(0x7f0000000180)}, &(0x7f0000000380)=0x40)

00:32:55 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

[ 1957.332432] RDX: 0000000000000002 RSI: 00007f97cbdb2d40 RDI: 00000000ffffff9c
[ 1957.339699] RBP: 00007f97cbdb2d40 R08: 0000000000000000 R09: 000000000000000e
[ 1957.346953] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1957.354205] R13: 00007ffc04d8cf1f R14: 00007f97cbdb3300 R15: 0000000000022000
00:32:55 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2000000, 0x42832, r0, 0x91c8d000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000))
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)

00:32:55 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000080)=""/4, 0x4}], 0x2, &(0x7f0000000340)=""/74, 0x4a}, 0x40000042)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000800)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:55 executing program 5:
clock_getres(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000080)={0xffffffffffffff7f, 0x8b, 0x1, 0x7fffffffffffffbf, 0x8, 0xffffffff80000000, 0x7, 0x8000}, &(0x7f00000000c0)={0x6, 0xfff, 0x0, 0xffffffffffff4f1d, 0xfffffffffffffffd, 0x1, 0x8, 0x801}, &(0x7f0000000100)={0x6, 0x4000000000000927, 0x8000, 0x6, 0x4, 0x6, 0xb29, 0x2}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000200)={[0x1000]}, 0x8})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000221000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/211, 0xd3, 0x1, &(0x7f0000000180)}, &(0x7f0000000380)=0x40)

00:32:55 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
remap_file_pages(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000000, 0x800, 0x1)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x4000)=nil, 0x4000})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
remap_file_pages(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000000, 0x800, 0x1) (async)
userfaultfd(0x1) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x4000)=nil, 0x4000}) (async)

00:32:55 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0) (async)

00:32:55 executing program 5:
clock_getres(0x5, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000080)={0xffffffffffffff7f, 0x8b, 0x1, 0x7fffffffffffffbf, 0x8, 0xffffffff80000000, 0x7, 0x8000}, &(0x7f00000000c0)={0x6, 0xfff, 0x0, 0xffffffffffff4f1d, 0xfffffffffffffffd, 0x1, 0x8, 0x801}, &(0x7f0000000100)={0x6, 0x4000000000000927, 0x8000, 0x6, 0x4, 0x6, 0xb29, 0x2}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000200)={[0x1000]}, 0x8})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000221000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/211, 0xd3, 0x1, &(0x7f0000000180)}, &(0x7f0000000380)=0x40)
clock_getres(0x5, &(0x7f0000000040)) (async)
pselect6(0x40, &(0x7f0000000080)={0xffffffffffffff7f, 0x8b, 0x1, 0x7fffffffffffffbf, 0x8, 0xffffffff80000000, 0x7, 0x8000}, &(0x7f00000000c0)={0x6, 0xfff, 0x0, 0xffffffffffff4f1d, 0xfffffffffffffffd, 0x1, 0x8, 0x801}, &(0x7f0000000100)={0x6, 0x4000000000000927, 0x8000, 0x6, 0x4, 0x6, 0xb29, 0x2}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000200)={[0x1000]}, 0x8}) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000221000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/211, 0xd3, 0x1, &(0x7f0000000180)}, &(0x7f0000000380)=0x40) (async)

00:32:55 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2000000, 0x42832, r0, 0x91c8d000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000))
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2000000, 0x42832, r0, 0x91c8d000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) (async)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async)

00:32:55 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 2:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc0000000000000, 0x8a8000)
mmap$usbfs(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000003, 0x4010, r0, 0x9)

00:32:55 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000800)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000800) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:32:55 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

00:32:55 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 2:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc0000000000000, 0x8a8000)
mmap$usbfs(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000003, 0x4010, r0, 0x9)
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) (async)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0xc0000000000000, 0x8a8000) (async)
mmap$usbfs(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000003, 0x4010, r0, 0x9) (async)

00:32:55 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2000000, 0x42832, r0, 0x91c8d000) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) (async)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)

00:32:55 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000800)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:55 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:32:55 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 2:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) (async)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc0000000000000, 0x8a8000)
mmap$usbfs(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000003, 0x4010, r0, 0x9)

00:32:55 executing program 1:
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040)=0x1, 0x6, 0x5)
munlock(&(0x7f0000381000/0x3000)=nil, 0x3000)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x1, 0x4000)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)

00:32:55 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x101, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)

00:32:55 executing program 3:
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:55 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x290040, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:55 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = socket(0x1d, 0x3, 0x8)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000))
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x1401, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c014}, 0x20000031)
r3 = msgget$private(0x0, 0x322)
msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/235)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:32:55 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 1:
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040)=0x1, 0x6, 0x5)
munlock(&(0x7f0000381000/0x3000)=nil, 0x3000)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x1, 0x4000)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040)=0x1, 0x6, 0x5) (async)
munlock(&(0x7f0000381000/0x3000)=nil, 0x3000) (async)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x1, 0x4000) (async)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async)

00:32:55 executing program 3:
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:55 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:32:55 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x290040, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:55 executing program 4:
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = socket(0x1d, 0x3, 0x8)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000))
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x1401, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c014}, 0x20000031)
r3 = msgget$private(0x0, 0x322)
msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/235)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
syz_open_dev$ptys(0xc, 0x3, 0x1)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
socket(0x1d, 0x3, 0x8) (async)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x4) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000)) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x1401, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c014}, 0x20000031) (async)
msgget$private(0x0, 0x322) (async)
msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/235) (async)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)

00:32:55 executing program 1:
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040)=0x1, 0x6, 0x5)
munlock(&(0x7f0000381000/0x3000)=nil, 0x3000)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x1, 0x4000)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040)=0x1, 0x6, 0x5) (async)
munlock(&(0x7f0000381000/0x3000)=nil, 0x3000) (async)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x1, 0x4000) (async)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async)

00:32:55 executing program 3:
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:55 executing program 4:
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x290040, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x290040, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:32:55 executing program 5:
mremap(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000223000/0x3000)=nil)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$dsp(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x7, 0x9a5d4b4af5bca890, 0xffffffffffffffff, 0x0)
shmget(0x2, 0x2000, 0x420, &(0x7f0000223000/0x2000)=nil)

00:32:55 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x7fffffff, 0x7fff, 0x4)

00:32:55 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x31)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0xffffffffffffffff, 0x81, 0x0)

00:32:55 executing program 5:
mremap(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000223000/0x3000)=nil)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$dsp(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x7, 0x9a5d4b4af5bca890, 0xffffffffffffffff, 0x0)
shmget(0x2, 0x2000, 0x420, &(0x7f0000223000/0x2000)=nil)
mremap(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000223000/0x3000)=nil) (async)
socket(0x10, 0x2, 0x0) (async)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mmap$dsp(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x7, 0x9a5d4b4af5bca890, 0xffffffffffffffff, 0x0) (async)
shmget(0x2, 0x2000, 0x420, &(0x7f0000223000/0x2000)=nil) (async)

00:32:55 executing program 4:
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:55 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
r1 = socket(0x1d, 0x3, 0x8)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000))
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x1401, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c014}, 0x20000031)
r3 = msgget$private(0x0, 0x322)
msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/235) (async)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:32:55 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mbind(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x7fffffff, 0x7fff, 0x4)

00:32:55 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r1 = syz_open_pts(r0, 0x202080)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x5)

00:32:56 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSIG(r0, 0x40045436, 0x31) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0xffffffffffffffff, 0x81, 0x0)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mbind(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x7fffffff, 0x7fff, 0x4)

00:32:56 executing program 5:
mremap(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000223000/0x3000)=nil)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$dsp(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x7, 0x9a5d4b4af5bca890, 0xffffffffffffffff, 0x0)
shmget(0x2, 0x2000, 0x420, &(0x7f0000223000/0x2000)=nil)
mremap(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000223000/0x3000)=nil) (async)
socket(0x10, 0x2, 0x0) (async)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mmap$dsp(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x7, 0x9a5d4b4af5bca890, 0xffffffffffffffff, 0x0) (async)
shmget(0x2, 0x2000, 0x420, &(0x7f0000223000/0x2000)=nil) (async)

00:32:56 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:56 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x31)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0xffffffffffffffff, 0x81, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSIG(r0, 0x40045436, 0x31) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0xffffffffffffffff, 0x81, 0x0) (async)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)
shmget(0x2, 0x4000, 0x200, &(0x7f0000005000/0x4000)=nil)

00:32:56 executing program 2:
mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000000000/0x4000)=nil)
mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xffe)

00:32:56 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r1 = syz_open_pts(r0, 0x202080)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x5)

00:32:56 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mremap(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000222000/0x1000)=nil)
remap_file_pages(&(0x7f0000223000/0x3000)=nil, 0x3000, 0x2000000, 0x7, 0x40)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)
shmget(0x2, 0x4000, 0x200, &(0x7f0000005000/0x4000)=nil)

00:32:56 executing program 2:
mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000000000/0x4000)=nil)
mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xffe)

00:32:56 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:56 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r1 = syz_open_pts(r0, 0x202080)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x5)

00:32:56 executing program 1:
r0 = timerfd_create(0xc350e347b3fb7603, 0x0)
timerfd_gettime(r0, 0x0)
mbind(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0xfffffffffffffffc, 0x6, 0x6)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140e, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x84)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)
shmget(0x2, 0x4000, 0x200, &(0x7f0000005000/0x4000)=nil)

00:32:56 executing program 2:
mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000000000/0x4000)=nil)
mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xffe)

00:32:56 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mremap(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000222000/0x1000)=nil) (async, rerun: 32)
remap_file_pages(&(0x7f0000223000/0x3000)=nil, 0x3000, 0x2000000, 0x7, 0x40) (rerun: 32)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040))

00:32:56 executing program 2:
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil)

00:32:56 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:56 executing program 1:
r0 = timerfd_create(0xc350e347b3fb7603, 0x0)
timerfd_gettime(r0, 0x0)
mbind(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0xfffffffffffffffc, 0x6, 0x6)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140e, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x84) (async)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)

00:32:56 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async, rerun: 32)
mremap(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000222000/0x1000)=nil) (async, rerun: 32)
remap_file_pages(&(0x7f0000223000/0x3000)=nil, 0x3000, 0x2000000, 0x7, 0x40)

00:32:56 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x40)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r2 = socket(0x1a, 0x2, 0x3)
ioctl$VT_WAITACTIVE(r1, 0x5607)
sendmsg$can_bcm(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x100, 0x3, {}, {}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x10, 0x1, 0x0, 0x0, "f0241088bfd12cdd36ca1c2ea48c922bf46a17914cb361d0621f4f62a691064de928dbb8ef9cee89defc326e2a0281a20cead827f54cce46ea38675b55ae3a1e"}}, 0x80}}, 0x801)

00:32:56 executing program 2:
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040))

00:32:56 executing program 2:
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil)

00:32:56 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:56 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20a002, 0x0)
timerfd_create(0x3, 0x800)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
timerfd_gettime(r1, &(0x7f0000000140))
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
mmap$fb(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x100000a, 0x13, r0, 0xbd000)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2aa680, 0x0)
mmap$fb(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x8, 0x30, r2, 0x9a000)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) (rerun: 64)

00:32:56 executing program 1:
r0 = timerfd_create(0xc350e347b3fb7603, 0x0)
timerfd_gettime(r0, 0x0)
mbind(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0xfffffffffffffffc, 0x6, 0x6)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140e, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x84)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
timerfd_create(0xc350e347b3fb7603, 0x0) (async)
timerfd_gettime(r0, 0x0) (async)
mbind(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0xfffffffffffffffc, 0x6, 0x6) (async)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140e, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x84) (async)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) (async)

00:32:56 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x40)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r2 = socket(0x1a, 0x2, 0x3)
ioctl$VT_WAITACTIVE(r1, 0x5607)
sendmsg$can_bcm(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x100, 0x3, {}, {}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x10, 0x1, 0x0, 0x0, "f0241088bfd12cdd36ca1c2ea48c922bf46a17914cb361d0621f4f62a691064de928dbb8ef9cee89defc326e2a0281a20cead827f54cce46ea38675b55ae3a1e"}}, 0x80}}, 0x801)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$TIOCSIG(r0, 0x40045436, 0x40) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
socket(0x1a, 0x2, 0x3) (async)
ioctl$VT_WAITACTIVE(r1, 0x5607) (async)
sendmsg$can_bcm(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x100, 0x3, {}, {}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x10, 0x1, 0x0, 0x0, "f0241088bfd12cdd36ca1c2ea48c922bf46a17914cb361d0621f4f62a691064de928dbb8ef9cee89defc326e2a0281a20cead827f54cce46ea38675b55ae3a1e"}}, 0x80}}, 0x801) (async)

00:32:56 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20a002, 0x0) (async)
timerfd_create(0x3, 0x800) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
timerfd_gettime(r1, &(0x7f0000000140)) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async)
mmap$fb(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x100000a, 0x13, r0, 0xbd000) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2aa680, 0x0)
mmap$fb(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x8, 0x30, r2, 0x9a000)

00:32:56 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20a002, 0x0)
timerfd_create(0x3, 0x800)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
timerfd_gettime(r1, &(0x7f0000000140))
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
mmap$fb(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x100000a, 0x13, r0, 0xbd000)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2aa680, 0x0)
mmap$fb(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x8, 0x30, r2, 0x9a000)

00:32:56 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='&\x00')

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000005000/0x2000)=nil, 0x2000})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000006000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00')
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:56 executing program 1:
r0 = socket(0x11, 0x800, 0x3)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = socket(0xb, 0x80d, 0x1b)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x8008}, 0x40000)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:56 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='&\x00')
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='&\x00') (async)

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040))

00:32:56 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x40)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r2 = socket(0x1a, 0x2, 0x3)
ioctl$VT_WAITACTIVE(r1, 0x5607)
sendmsg$can_bcm(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x100, 0x3, {}, {}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x10, 0x1, 0x0, 0x0, "f0241088bfd12cdd36ca1c2ea48c922bf46a17914cb361d0621f4f62a691064de928dbb8ef9cee89defc326e2a0281a20cead827f54cce46ea38675b55ae3a1e"}}, 0x80}}, 0x801)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$TIOCSIG(r0, 0x40045436, 0x40) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
socket(0x1a, 0x2, 0x3) (async)
ioctl$VT_WAITACTIVE(r1, 0x5607) (async)
sendmsg$can_bcm(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x100, 0x3, {}, {}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x10, 0x1, 0x0, 0x0, "f0241088bfd12cdd36ca1c2ea48c922bf46a17914cb361d0621f4f62a691064de928dbb8ef9cee89defc326e2a0281a20cead827f54cce46ea38675b55ae3a1e"}}, 0x80}}, 0x801) (async)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000005000/0x2000)=nil, 0x2000}) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000006000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:56 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20a002, 0x0)
timerfd_create(0x3, 0x800) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
timerfd_gettime(r1, &(0x7f0000000140)) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
mmap$fb(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x100000a, 0x13, r0, 0xbd000)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2aa680, 0x0)
mmap$fb(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x8, 0x30, r2, 0x9a000)

00:32:56 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='&\x00')

00:32:56 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$fb(&(0x7f0000222000/0x4000)=nil, 0x4000, 0x1, 0x100010, 0xffffffffffffffff, 0x6b000)

00:32:56 executing program 1:
r0 = socket(0x11, 0x800, 0x3) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
r2 = socket(0xb, 0x80d, 0x1b)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x8008}, 0x40000)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000005000/0x2000)=nil, 0x2000}) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000006000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:56 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x3000)=nil, 0x3000})

00:32:56 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async, rerun: 64)
mmap$fb(&(0x7f0000222000/0x4000)=nil, 0x4000, 0x1, 0x100010, 0xffffffffffffffff, 0x6b000) (rerun: 64)

00:32:56 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0xe, 0x19, 0xf0, &(0x7f0000000000)="778dd374f927cea1c6afb31ad7fedb792a374e777bc41ea181cf60fef369e8a44f50ae13e521efccd7925e90a285f1ec043a0b69c3e89a67ef9825ff7243bf26b128c0f33075f787d96db55d0591ec265fad175104ef8964c5bd8f22d61d8d20b42c738396c1f62fc9de1c0fcc53e33e64157546ebd0814b46793aeef5cad2ce034c43463f0d35a1bd69a6b7d133f58c13eae472a0d76a6b8ea67c21db9f35dafed4413f3818c454b81ce38afa215ad7e23b68ecca03088a08fe4032fcab7404f1a259111e87bf0e4a5543c33e234c34eaae6a22880f042bcad5f778d1a0fcea08a8115b2893d11f430db3d65e81915115b359d462af4ff8b2a0bfa13107540839bbfbc2e08658ed3e658920738a1b413a643be25db5fbc67754e22383911ba0d0f5d3d415487df01460079c7c70b5e0faf5ae1f8abfec82ff3c1f5cea189dc9a87c1e995156ed318bfd3fd88c3926d8e9031c2e37a65e0354ef9aa4054921f7615d36c7b4de5d522878089ca7a2fc96ef66fa28ba87a7b5323b2dc6cc5ee169cdea9d2fcca0c23e39162d9fbcb5ec3b781ee349314fcdd18d7e8289d6331f8429c3a90b0ddab2e33ea5b104f6bf366319cbedb4f4115387053f1a239cf7f8ced4c0e7999fdd1c7fae6cfd06a30bb72f8490c67bca2248e8a7caacb5d87eb7b5e24ff07f0111a80b07fb69513dee0f9a3975ac64cf670bb02229bc496df29c78f0ed180e09dd84883be984a1b0698c0c55c8d9f45b1ebf8b6b10639d6fa33dc0db7ec85796c38f114e7d5901d5883d46f0369800130ad18720c8c059efaa9be5a224d502580d75daeb6ddf87eda4c37b0598230f6f095ff7f0acafe0f9e0209e66bd781656054725b3070972a2e0c34b2fb0d5b28bd37fdf228977fb0690464be79d7ae04aa9547f4891cbcf4bbe4be5a4d85360186607b1d75f16a0e27bdb9e63391213bf29d6a73e42dc871ac2597e324115aefa973e77a0cdc7872184e0eb908c4e8375ea411c65224ee67680365ce44a07d36a202862f8e95bf3d175daba7bc8d70588ffc305514e827ee8ce0bca9fc6c191576c7c37b1841c45f172c90e6f7ab5e57c93bcc4cd05b4b76bc8c97eb358d9e31212678d877b1b814c256e7eaeafdaf87c1a2d09e0afd4a1c0bcd8276f46a151669aef59e646f62ba1d17345ee0291c193e52a1595d49e1edb80fbb199fbf838b2a805277bab0e108e42adfd36005a0396c7f79e5d79cc226a15225a02a19fd5cb51ccbf79952b8d03be8193400384eafa09c394402925f46cbc70414095bd04a0362c53bb67eeb6e8e987f362c372a5b7069893af1637a2d90954c5a1806849ba1e2c2a96d9e7e1d13bbabbdc6809c98c58e967f0a86a6f2a1e1bcf518ab5080a1da0745792e81b4557ea0346827ad3732c5f6279268817a8bdb053d95e12085456d15184d3d758b1075235"})

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040))

00:32:56 executing program 1:
r0 = socket(0x11, 0x800, 0x3)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = socket(0xb, 0x80d, 0x1b)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x8008}, 0x40000)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
socket(0x11, 0x800, 0x3) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
socket(0xb, 0x80d, 0x1b) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x8008}, 0x40000) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)

00:32:56 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x3000)=nil, 0x3000})

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000005000/0x1000)=nil, 0x1000})

00:32:56 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$fb(&(0x7f0000222000/0x4000)=nil, 0x4000, 0x1, 0x100010, 0xffffffffffffffff, 0x6b000)

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040))

00:32:56 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0xe, 0x19, 0xf0, &(0x7f0000000000)="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"})

00:32:56 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x3000)=nil, 0x3000})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x3000)=nil, 0x3000}) (async)

00:32:56 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0xe, 0x19, 0xf0, &(0x7f0000000000)="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"})
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0xe, 0x19, 0xf0, &(0x7f0000000000)="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"}) (async)

00:32:56 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x7e, 0x7)
mmap$fb(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x94000)
mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x38fd000)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000005000/0x1000)=nil, 0x1000})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
userfaultfd(0x80000) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000005000/0x1000)=nil, 0x1000}) (async)

00:32:56 executing program 2:
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)

00:32:56 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x7e, 0x7) (async, rerun: 64)
mmap$fb(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x94000) (rerun: 64)
mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x38fd000)

00:32:56 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x101, 0x68, 0x3, 0x8}, {0x4, 0x4, 0x71, 0x100}, {0x800, 0x0, 0xdf, 0xfff}, {0x0, 0x6, 0x8}, {0x2, 0x20, 0xe1, 0xcfe4}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000000c0))
syz_open_dev$dmmidi(&(0x7f0000000100), 0x6, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x1, 0x101, 0x0)

00:32:56 executing program 0:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x400, 0x70bd29, 0x25dedbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1402, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x18}}, 0x4c000)

00:32:56 executing program 2:
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:56 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x101, 0x68, 0x3, 0x8}, {0x4, 0x4, 0x71, 0x100}, {0x800, 0x0, 0xdf, 0xfff}, {0x0, 0x6, 0x8}, {0x2, 0x20, 0xe1, 0xcfe4}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000000c0))
syz_open_dev$dmmidi(&(0x7f0000000100), 0x6, 0x0) (async, rerun: 32)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x1, 0x101, 0x0) (rerun: 32)

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000005000/0x1000)=nil, 0x1000})

00:32:56 executing program 0:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x400, 0x70bd29, 0x25dedbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1402, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x18}}, 0x4c000)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x400, 0x70bd29, 0x25dedbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1402, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x18}}, 0x4c000) (async)

00:32:56 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x7e, 0x7) (async)
mmap$fb(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x94000) (async)
mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x38fd000)

00:32:56 executing program 2:
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:56 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x101, 0x68, 0x3, 0x8}, {0x4, 0x4, 0x71, 0x100}, {0x800, 0x0, 0xdf, 0xfff}, {0x0, 0x6, 0x8}, {0x2, 0x20, 0xe1, 0xcfe4}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000000c0)) (async)
syz_open_dev$dmmidi(&(0x7f0000000100), 0x6, 0x0) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x1, 0x101, 0x0)

00:32:56 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000002000/0xa000)=nil, 0xa000, 0xa)

00:32:56 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0xfffffffffffffff7, 0x81, 0x0)
mprotect(&(0x7f0000384000/0x3000)=nil, 0x3000, 0x2000005)
mmap$binder(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffff)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000382000/0x3000)=nil, 0x3000})

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000008000/0x1000)=nil, 0x1000)

00:32:56 executing program 0:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x400, 0x70bd29, 0x25dedbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1402, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x18}}, 0x4c000)

00:32:56 executing program 5:
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040))
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0xc4, 0x103, 0x0)
shmat(0x0, &(0x7f0000222000/0x4000)=nil, 0x6000)

00:32:56 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000002000/0xa000)=nil, 0xa000, 0xa)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mprotect(&(0x7f0000002000/0xa000)=nil, 0xa000, 0xa) (async)

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})

00:32:56 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x810, r0, 0xc7000)

00:32:56 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0xfffffffffffffff7, 0x81, 0x0) (async)
mprotect(&(0x7f0000384000/0x3000)=nil, 0x3000, 0x2000005) (async)
mmap$binder(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffff) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000382000/0x3000)=nil, 0x3000})

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000008000/0x1000)=nil, 0x1000)

00:32:56 executing program 5:
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040))
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0xc4, 0x103, 0x0)
shmat(0x0, &(0x7f0000222000/0x4000)=nil, 0x6000)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0xc4, 0x103, 0x0) (async)
shmat(0x0, &(0x7f0000222000/0x4000)=nil, 0x6000) (async)

00:32:56 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000002000/0xa000)=nil, 0xa000, 0xa)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mprotect(&(0x7f0000002000/0xa000)=nil, 0xa000, 0xa) (async)

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

00:32:56 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x810, r0, 0xc7000)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x810, r0, 0xc7000) (async)

00:32:56 executing program 5:
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0xc4, 0x103, 0x0) (async, rerun: 64)
shmat(0x0, &(0x7f0000222000/0x4000)=nil, 0x6000) (rerun: 64)

00:32:56 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000008000/0x1000)=nil, 0x1000)

00:32:56 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0xfffffffffffffff7, 0x81, 0x0)
mprotect(&(0x7f0000384000/0x3000)=nil, 0x3000, 0x2000005) (async)
mmap$binder(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffff) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000382000/0x3000)=nil, 0x3000})

00:32:56 executing program 2:
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000004000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00')

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)

00:32:56 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x810, r0, 0xc7000)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x810, r0, 0xc7000) (async)

00:32:56 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)

00:32:57 executing program 5:
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000080))
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000), 0x101, 0x2)
mmap$snddsp_control(&(0x7f0000222000/0x3000)=nil, 0x1000, 0x2000005, 0x10, 0xffffffffffffffff, 0x83000000)
mmap$binder(&(0x7f0000031000/0xc00000)=nil, 0xc00000, 0x1, 0x11, 0xffffffffffffffff, 0x5)

00:32:57 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)

00:32:57 executing program 2:
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000004000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00')

00:32:57 executing program 3:
mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000008000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:57 executing program 1:
mbind(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x7, 0x0)

00:32:57 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r1, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000007, 0x50, r0, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)

00:32:57 executing program 5:
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000080)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000), 0x101, 0x2) (async)
mmap$snddsp_control(&(0x7f0000222000/0x3000)=nil, 0x1000, 0x2000005, 0x10, 0xffffffffffffffff, 0x83000000) (async)
mmap$binder(&(0x7f0000031000/0xc00000)=nil, 0xc00000, 0x1, 0x11, 0xffffffffffffffff, 0x5)

00:32:57 executing program 3:
mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000008000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000008000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:32:57 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000002000/0xa000)=nil, 0xa000, 0xa)

00:32:57 executing program 2:
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000004000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00')
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000004000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') (async)

00:32:57 executing program 1:
mbind(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x7, 0x0)
mbind(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x7, 0x0) (async)

00:32:57 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r1, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000007, 0x50, r0, 0x0) (async)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)

00:32:57 executing program 5:
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000080)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000), 0x101, 0x2) (async)
mmap$snddsp_control(&(0x7f0000222000/0x3000)=nil, 0x1000, 0x2000005, 0x10, 0xffffffffffffffff, 0x83000000) (async)
mmap$binder(&(0x7f0000031000/0xc00000)=nil, 0xc00000, 0x1, 0x11, 0xffffffffffffffff, 0x5)

00:32:57 executing program 3:
mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000008000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000008000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:32:57 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:32:57 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})

00:32:57 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r1, 0x0) (async)
mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000007, 0x50, r0, 0x0) (async)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)

00:32:57 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})

00:32:57 executing program 1:
mbind(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x7, 0x0)

00:32:57 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080))

00:32:57 executing program 4:
mremap(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000223000/0x3000)=nil)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$dsp(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x7, 0x9a5d4b4af5bca890, 0xffffffffffffffff, 0x0)
shmget(0x2, 0x2000, 0x420, &(0x7f0000223000/0x2000)=nil)

00:32:57 executing program 1:
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/129)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:57 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080))
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) (async)

00:32:57 executing program 3:
r0 = getuid()
r1 = msgget$private(0x0, 0x9)
r2 = getuid()
ioprio_get$uid(0x3, r2)
r3 = msgget$private(0x0, 0x260)
r4 = gettid()
setpgid(r4, 0x0)
r5 = gettid()
msgctl$IPC_SET(r3, 0x1, &(0x7f0000001600)={{0x3, r2, 0x0, r2, 0xee00, 0x8d, 0xffff}, 0x0, 0x0, 0x8, 0x6, 0x5, 0xdcf0, 0x733, 0x6, 0x2, 0x5, r4, r5})
r6 = getgid()
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, r2, r6, r0, 0xee01, 0x0, 0x7}, 0x0, 0x0, 0x80000001, 0x7, 0x3, 0x10000, 0x7fffffffffffffff, 0x9, 0x80, 0xfff7, 0xffffffffffffffff})
r7 = getuid()
ioprio_get$uid(0x3, r7)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

00:32:57 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$midi(&(0x7f0000000040), 0x1f, 0x4000)

00:32:57 executing program 1:
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/129) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:57 executing program 3:
r0 = getuid()
r1 = msgget$private(0x0, 0x9)
r2 = getuid()
ioprio_get$uid(0x3, r2)
r3 = msgget$private(0x0, 0x260)
r4 = gettid()
setpgid(r4, 0x0)
r5 = gettid()
msgctl$IPC_SET(r3, 0x1, &(0x7f0000001600)={{0x3, r2, 0x0, r2, 0xee00, 0x8d, 0xffff}, 0x0, 0x0, 0x8, 0x6, 0x5, 0xdcf0, 0x733, 0x6, 0x2, 0x5, r4, r5})
r6 = getgid()
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, r2, r6, r0, 0xee01, 0x0, 0x7}, 0x0, 0x0, 0x80000001, 0x7, 0x3, 0x10000, 0x7fffffffffffffff, 0x9, 0x80, 0xfff7, 0xffffffffffffffff})
r7 = getuid()
ioprio_get$uid(0x3, r7)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
getuid() (async)
msgget$private(0x0, 0x9) (async)
getuid() (async)
ioprio_get$uid(0x3, r2) (async)
msgget$private(0x0, 0x260) (async)
gettid() (async)
setpgid(r4, 0x0) (async)
gettid() (async)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000001600)={{0x3, r2, 0x0, r2, 0xee00, 0x8d, 0xffff}, 0x0, 0x0, 0x8, 0x6, 0x5, 0xdcf0, 0x733, 0x6, 0x2, 0x5, r4, r5}) (async)
getgid() (async)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, r2, r6, r0, 0xee01, 0x0, 0x7}, 0x0, 0x0, 0x80000001, 0x7, 0x3, 0x10000, 0x7fffffffffffffff, 0x9, 0x80, 0xfff7, 0xffffffffffffffff}) (async)
getuid() (async)
ioprio_get$uid(0x3, r7) (async)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async)

00:32:57 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080))

00:32:57 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})

00:32:57 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = socket(0x1d, 0x3, 0x8)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000))
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x1401, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c014}, 0x20000031)
r3 = msgget$private(0x0, 0x322)
msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/235)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:32:57 executing program 1:
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/129)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:57 executing program 2:
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0xfa)
mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x9052, 0xffffffffffffffff, 0x2)

00:32:57 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$midi(&(0x7f0000000040), 0x1f, 0x4000)

00:32:57 executing program 3:
r0 = getuid()
r1 = msgget$private(0x0, 0x9) (async)
r2 = getuid()
ioprio_get$uid(0x3, r2) (async)
r3 = msgget$private(0x0, 0x260)
r4 = gettid()
setpgid(r4, 0x0) (async)
r5 = gettid()
msgctl$IPC_SET(r3, 0x1, &(0x7f0000001600)={{0x3, r2, 0x0, r2, 0xee00, 0x8d, 0xffff}, 0x0, 0x0, 0x8, 0x6, 0x5, 0xdcf0, 0x733, 0x6, 0x2, 0x5, r4, r5})
r6 = getgid()
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, r2, r6, r0, 0xee01, 0x0, 0x7}, 0x0, 0x0, 0x80000001, 0x7, 0x3, 0x10000, 0x7fffffffffffffff, 0x9, 0x80, 0xfff7, 0xffffffffffffffff}) (async)
r7 = getuid()
ioprio_get$uid(0x3, r7)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

00:32:57 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x2000)

00:32:57 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
shmget(0x0, 0x11000, 0x54000000, &(0x7f0000380000/0x11000)=nil)

00:32:57 executing program 4:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc0000000000000, 0x8a8000)
mmap$usbfs(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000003, 0x4010, r0, 0x9)

00:32:57 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
syz_open_dev$midi(&(0x7f0000000040), 0x1f, 0x4000)

00:32:57 executing program 2:
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) (async)
mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0xfa) (async, rerun: 32)
mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x9052, 0xffffffffffffffff, 0x2) (rerun: 32)

00:32:57 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
shmget(0x0, 0x11000, 0x54000000, &(0x7f0000380000/0x11000)=nil)

00:32:57 executing program 4:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc0000000000000, 0x8a8000)
mmap$usbfs(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000003, 0x4010, r0, 0x9)

00:32:57 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/78, 0x4e, 0x0, &(0x7f0000000080)=""/166, 0xa6}, &(0x7f0000000180)=0x40)

00:32:57 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
shmget(0x0, 0x11000, 0x54000000, &(0x7f0000380000/0x11000)=nil)

00:32:57 executing program 4:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc0000000000000, 0x8a8000)
mmap$usbfs(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000003, 0x4010, r0, 0x9)

00:32:57 executing program 2:
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0xfa)
mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x9052, 0xffffffffffffffff, 0x2)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) (async)
mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0xfa) (async)
mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x9052, 0xffffffffffffffff, 0x2) (async)

00:32:57 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCNXCL(r0, 0x540d)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x100, 0x5, 0x9, 0x7fff, 0x80, "7fe1ef8cdc92d75d37718e1337135760bc9b16", 0x3f, 0x7fff})
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x38)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:32:57 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x2000)

00:32:57 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/78, 0x4e, 0x0, &(0x7f0000000080)=""/166, 0xa6}, &(0x7f0000000180)=0x40)

00:32:57 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1865fb0000000000000004000125bd01000100"/29], 0x18}, 0x1, 0x0, 0x0, 0x4000884}, 0x40)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x1406, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}}, 0x4000)

00:32:57 executing program 4:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
syz_open_dev$usbfs(&(0x7f0000000000), 0xc0000000000000, 0x8a8000)

00:32:57 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCNXCL(r0, 0x540d)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x100, 0x5, 0x9, 0x7fff, 0x80, "7fe1ef8cdc92d75d37718e1337135760bc9b16", 0x3f, 0x7fff})
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x38)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:32:57 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1865fb0000000000000004000125bd01000100"/29], 0x18}, 0x1, 0x0, 0x0, 0x4000884}, 0x40) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x1406, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}}, 0x4000)

00:32:57 executing program 2:
mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000001000/0x2000)=nil)
socketpair(0x25, 0x80000, 0x0, &(0x7f0000000000))

00:32:57 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/78, 0x4e, 0x0, &(0x7f0000000080)=""/166, 0xa6}, &(0x7f0000000180)=0x40)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/78, 0x4e, 0x0, &(0x7f0000000080)=""/166, 0xa6}, &(0x7f0000000180)=0x40) (async)

00:32:57 executing program 4:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)

00:32:57 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x2000)

00:32:57 executing program 2:
mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000001000/0x2000)=nil) (async, rerun: 32)
socketpair(0x25, 0x80000, 0x0, &(0x7f0000000000)) (rerun: 32)

00:32:57 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCNXCL(r0, 0x540d) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x100, 0x5, 0x9, 0x7fff, 0x80, "7fe1ef8cdc92d75d37718e1337135760bc9b16", 0x3f, 0x7fff}) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x38) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:32:57 executing program 4:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)

00:32:57 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x242800, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000008000/0x1000)=nil})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
openat$cgroup_int(r1, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:57 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async, rerun: 64)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1865fb0000000000000004000125bd01000100"/29], 0x18}, 0x1, 0x0, 0x0, 0x4000884}, 0x40) (rerun: 64)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x1406, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}}, 0x4000)

00:32:57 executing program 4:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)

00:32:57 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x242800, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000008000/0x1000)=nil})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
openat$cgroup_int(r1, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x242800, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000008000/0x1000)=nil}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
openat$cgroup_int(r1, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:32:57 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000180)=""/87)
r1 = msgget$private(0x0, 0x81)
msgsnd(r1, &(0x7f0000000080)={0x0, "5fc37f864d8f4796aec24d9f9d"}, 0x15, 0x800)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='*k\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002a5e4029200100037218000a0101000000000000db6f96576d0b"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1409, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004c059}, 0x14)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x1, 0x101, 0x6)

00:32:57 executing program 2:
mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000001000/0x2000)=nil)
socketpair(0x25, 0x80000, 0x0, &(0x7f0000000000))
mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000001000/0x2000)=nil) (async)
socketpair(0x25, 0x80000, 0x0, &(0x7f0000000000)) (async)

00:32:57 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000))

00:32:57 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x0, 0x8000)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x1000)=nil, 0x1000})

00:32:57 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000180)=""/87)
r1 = msgget$private(0x0, 0x81)
msgsnd(r1, &(0x7f0000000080)={0x0, "5fc37f864d8f4796aec24d9f9d"}, 0x15, 0x800)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='*k\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002a5e4029200100037218000a0101000000000000db6f96576d0b"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1409, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004c059}, 0x14)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x1, 0x101, 0x6)
msgget$private(0x0, 0x0) (async)
msgctl$IPC_RMID(r0, 0x0) (async)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000180)=""/87) (async)
msgget$private(0x0, 0x81) (async)
msgsnd(r1, &(0x7f0000000080)={0x0, "5fc37f864d8f4796aec24d9f9d"}, 0x15, 0x800) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='*k\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002a5e4029200100037218000a0101000000000000db6f96576d0b"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1409, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004c059}, 0x14) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x1, 0x101, 0x6) (async)

00:32:57 executing program 4:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)

00:32:57 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000001000/0x3000)=nil, 0x400, 0x0, 0x4a})
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
mmap$snddsp_status(&(0x7f0000009000/0x2000)=nil, 0x1000, 0x4, 0x40010, r0, 0x82000000)

00:32:57 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000))

00:32:57 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x242800, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000008000/0x1000)=nil}) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
openat$cgroup_int(r1, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:57 executing program 4:
mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)

00:32:57 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000001000/0x3000)=nil, 0x400, 0x0, 0x4a}) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
mmap$snddsp_status(&(0x7f0000009000/0x2000)=nil, 0x1000, 0x4, 0x40010, r0, 0x82000000)

00:32:57 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x0, 0x8000)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x1000)=nil, 0x1000})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x0, 0x8000) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x1000)=nil, 0x1000}) (async)

00:32:57 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r0, 0xb4000)

00:32:57 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000))

00:32:57 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0) (async)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000180)=""/87) (async)
r1 = msgget$private(0x0, 0x81)
msgsnd(r1, &(0x7f0000000080)={0x0, "5fc37f864d8f4796aec24d9f9d"}, 0x15, 0x800) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='*k\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002a5e4029200100037218000a0101000000000000db6f96576d0b"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1409, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004c059}, 0x14) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x1, 0x101, 0x6)

00:32:57 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) (async)

00:32:57 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000001000/0x3000)=nil, 0x400, 0x0, 0x4a}) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
mmap$snddsp_status(&(0x7f0000009000/0x2000)=nil, 0x1000, 0x4, 0x40010, r0, 0x82000000)

00:32:57 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x0, 0x8000)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x1000)=nil, 0x1000})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x0, 0x8000) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x1000)=nil, 0x1000}) (async)

00:32:57 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, r0)

00:32:57 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

00:32:57 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x38)
r3 = socket(0x11, 0x3, 0x6)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340)=0x4)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000)
connect$can_bcm(r3, &(0x7f0000000380)={0x1d, r4}, 0x10)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0xf2, "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"})

00:32:57 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r0, 0xb4000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r0, 0xb4000) (async)

00:32:57 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil)
remap_file_pages(&(0x7f0000004000/0x6000)=nil, 0x6000, 0x73a1d3bf4c7b3f28, 0x9, 0x20000)

00:32:57 executing program 1:
pkey_alloc(0x0, 0x3)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:57 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

00:32:57 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, r0)

00:32:57 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r0, 0xb4000)

00:32:57 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) (async)
remap_file_pages(&(0x7f0000004000/0x6000)=nil, 0x6000, 0x73a1d3bf4c7b3f28, 0x9, 0x20000)

00:32:57 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x38)
r3 = socket(0x11, 0x3, 0x6)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340)=0x4)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000)
connect$can_bcm(r3, &(0x7f0000000380)={0x1d, r4}, 0x10)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0xf2, "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"})
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$VT_WAITACTIVE(r2, 0x5607) (async)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x38) (async)
socket(0x11, 0x3, 0x6) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000) (async)
connect$can_bcm(r3, &(0x7f0000000380)={0x1d, r4}, 0x10) (async)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0xf2, "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"}) (async)

00:32:57 executing program 1:
pkey_alloc(0x0, 0x3)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
pkey_alloc(0x0, 0x3) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)

00:32:58 executing program 3:
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0)
mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000004000/0x4000)=nil, 0x1000, 0x1000008, 0x30, r0, 0x83000000)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, r0)

00:32:58 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil)
remap_file_pages(&(0x7f0000004000/0x6000)=nil, 0x6000, 0x73a1d3bf4c7b3f28, 0x9, 0x20000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) (async)
remap_file_pages(&(0x7f0000004000/0x6000)=nil, 0x6000, 0x73a1d3bf4c7b3f28, 0x9, 0x20000) (async)

00:32:58 executing program 5:
socketpair(0x28, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x5, 0x0, 0x3)

00:32:58 executing program 1:
pkey_alloc(0x0, 0x3) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:58 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x38) (async)
r3 = socket(0x11, 0x3, 0x6) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340)=0x4)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000) (async)
connect$can_bcm(r3, &(0x7f0000000380)={0x1d, r4}, 0x10) (async)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0xf2, "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"})

00:32:58 executing program 3:
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) (async)
mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$snddsp_control(&(0x7f0000004000/0x4000)=nil, 0x1000, 0x1000008, 0x30, r0, 0x83000000) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:58 executing program 5:
socketpair(0x28, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x5, 0x0, 0x3)
socketpair(0x28, 0x4, 0x0, &(0x7f0000000040)) (async)
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x5, 0x0, 0x3) (async)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000001000/0x4000)=nil, 0x4000})
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000001000/0x1000)=nil, 0x1000})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000001, 0x140010, r0, 0x82000000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000914000426bd7000fcdbdf2508000100000000000800010001000000080001000100000008000100010000008415e75a06a35ebd8d14ca55f8bd7b49eab42212898f71a8697c84b2a66650ddf7fe48dd2eae997937d78c1ba099954b06c1c0e8dbcae76e"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x8000)

00:32:58 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

00:32:58 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xe4000)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000001000/0x4000)=nil, 0x4000})
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000001000/0x1000)=nil, 0x1000}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000001, 0x140010, r0, 0x82000000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000914000426bd7000fcdbdf2508000100000000000800010001000000080001000100000008000100010000008415e75a06a35ebd8d14ca55f8bd7b49eab42212898f71a8697c84b2a66650ddf7fe48dd2eae997937d78c1ba099954b06c1c0e8dbcae76e"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x8000)

00:32:58 executing program 5:
socketpair(0x28, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x5, 0x0, 0x3)

00:32:58 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x15)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCCONS(r2, 0x541d)

00:32:58 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

00:32:58 executing program 3:
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0)
mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000004000/0x4000)=nil, 0x1000, 0x1000008, 0x30, r0, 0x83000000)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) (async)
mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$snddsp_control(&(0x7f0000004000/0x4000)=nil, 0x1000, 0x1000008, 0x30, r0, 0x83000000) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000001000/0x4000)=nil, 0x4000}) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000001000/0x1000)=nil, 0x1000}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000001, 0x140010, r0, 0x82000000) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000914000426bd7000fcdbdf2508000100000000000800010001000000080001000100000008000100010000008415e75a06a35ebd8d14ca55f8bd7b49eab42212898f71a8697c84b2a66650ddf7fe48dd2eae997937d78c1ba099954b06c1c0e8dbcae76e"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x8000)

00:32:58 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xe4000)

00:32:58 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x15)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCCONS(r2, 0x541d)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mremap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000222000/0x2000)=nil)

00:32:58 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async, rerun: 32)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xe4000)

00:32:58 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

00:32:58 executing program 3:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x101)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404001, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000c147f002abd7000ffdbdf2508003d000200000008000b000300000006003d00020000000800030002000000080003000100000008003d0001000000080003000300000008000300030000cf5a"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000091)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x30, 0xffffffffffffffff, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x8d, "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"})

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mremap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000222000/0x2000)=nil)

00:32:58 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x15) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCCONS(r2, 0x541d)

00:32:58 executing program 3:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x101)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) (async)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404001, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000c147f002abd7000ffdbdf2508003d000200000008000b000300000006003d00020000000800030002000000080003000100000008003d0001000000080003000300000008000300030000cf5a"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000091) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x30, 0xffffffffffffffff, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x8d, "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"})

00:32:58 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

00:32:58 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

00:32:58 executing program 1:
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40011)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x2f8, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x124, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "44bb7ccbac281eeedf4af947c3bf60c35d5c26d7d9f0ce1ec02ea532a5514ebf"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbc5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x164, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c3205af9b1e003fb9a7ea1034f1acf40"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc3a4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc143aad2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dea53cee953b5ec46a2c8984049afb8440e146fde3d25477b8cb097f03c816a1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d52961998d8e12186af431e2167c557b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xcb}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "60f236f5bb65bab96f3b032bc654981876536871bd8f7d53027cc45238393ccf"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x3c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "219a6bbbecba7de6b6d4863bd9ccfa9378b22e3c158c4c12c44acf698945f3a8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cc2eb9a78a30954a113a2c4f7bd80726"}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/69, 0x45, 0x1, &(0x7f00000000c0)=""/202, 0xca}, &(0x7f0000000200)=0x40)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mremap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000222000/0x2000)=nil)

00:32:58 executing program 3:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x101)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404001, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000c147f002abd7000ffdbdf2508003d000200000008000b000300000006003d00020000000800030002000000080003000100000008003d0001000000080003000300000008000300030000cf5a"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000091)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x30, 0xffffffffffffffff, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x8d, "5ed4655946781ddfbe073a1e75b1bdbfa5538e0e7d0438aa11d1a2082eb01808d98926694a2c27c5f665482b537930e7c5129416991c2cfdf4302a12d133f23cbf49d5d9c2ad80c4d9efcaba9221ca0143f5ecf0f630cd11118270ea9f37e3533d0b54f0d5b04b5eb8bc35be804797ade6f7511cbe39944e0c57e32e16929d4fb03fe68f0a97efdeb9a4caff45f2f39ff210288250e91cdc013a16f3b19648bb3fee55c339070204373e8fb0edb8711a40d39dccea4d78b3737ff81a687413dafc90a1d94c541a99b2e1d77b1b96ad2135cac31c60c6121361f4e58e1184c6c3ab1969331f816bf1e1e971fade9827330ee4e542372accdf78fc0e2c58201808936b64069becc91d0e153b55a10b94981dab4cefdf32e4a6e483c23a0acf646f4f6d3b9529144a425b745931229dad3c4d54f2a9c1f2b30bb3cf990e0dad62da81b361524db21a0ccd247608ea0c7c95973b116d21b020f360c229d926420f5994eafd42c8f6f60704a65b65cbeae0ef907308531f988b986b33411d9c4ec2b4db93924395dafc083808fc57a0a1ebee20f2bfda20be188d850624e4c87ff3ba2e1a3b5297e9c95e0d31d785000ab451d769064bbfb19460b2d2f85dae488dc5b938d9e635777581005292ba7ae2742ecc8c545a91cf78c0c9ff72d0cd617d4ae079a8c9d3d973271099f3988441387b0d13147716b8fac58df64a4a4de77797"})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x101) (async)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) (async)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404001, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000c147f002abd7000ffdbdf2508003d000200000008000b000300000006003d00020000000800030002000000080003000100000008003d0001000000080003000300000008000300030000cf5a"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000091) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x30, 0xffffffffffffffff, 0x0) (async)
shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x8d, "5ed4655946781ddfbe073a1e75b1bdbfa5538e0e7d0438aa11d1a2082eb01808d98926694a2c27c5f665482b537930e7c5129416991c2cfdf4302a12d133f23cbf49d5d9c2ad80c4d9efcaba9221ca0143f5ecf0f630cd11118270ea9f37e3533d0b54f0d5b04b5eb8bc35be804797ade6f7511cbe39944e0c57e32e16929d4fb03fe68f0a97efdeb9a4caff45f2f39ff210288250e91cdc013a16f3b19648bb3fee55c339070204373e8fb0edb8711a40d39dccea4d78b3737ff81a687413dafc90a1d94c541a99b2e1d77b1b96ad2135cac31c60c6121361f4e58e1184c6c3ab1969331f816bf1e1e971fade9827330ee4e542372accdf78fc0e2c58201808936b64069becc91d0e153b55a10b94981dab4cefdf32e4a6e483c23a0acf646f4f6d3b9529144a425b745931229dad3c4d54f2a9c1f2b30bb3cf990e0dad62da81b361524db21a0ccd247608ea0c7c95973b116d21b020f360c229d926420f5994eafd42c8f6f60704a65b65cbeae0ef907308531f988b986b33411d9c4ec2b4db93924395dafc083808fc57a0a1ebee20f2bfda20be188d850624e4c87ff3ba2e1a3b5297e9c95e0d31d785000ab451d769064bbfb19460b2d2f85dae488dc5b938d9e635777581005292ba7ae2742ecc8c545a91cf78c0c9ff72d0cd617d4ae079a8c9d3d973271099f3988441387b0d13147716b8fac58df64a4a4de77797"}) (async)

00:32:58 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3}) (async)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket(0x8, 0x4, 0x40)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "bbf8a3fee76ccafa", "32e5446464727d8fd01ce50941d82cea89193af6eeaa9444594042713d38fe6b", "b1e43ff9", "156dcd51de24b056"}, 0x38)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000221000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/99, 0x63, 0x1, &(0x7f00000000c0)=""/209, 0xd1}, &(0x7f0000000200)=0x40)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="e5ee1db4e584fd1341df1a0c92635a69", 0x10)
r3 = pkey_alloc(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pkey_mprotect(&(0x7f0000221000/0x4000)=nil, 0x4000, 0x8, r3)

00:32:58 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, r0, 0x0)

00:32:58 executing program 1:
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40011)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x2f8, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x124, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "44bb7ccbac281eeedf4af947c3bf60c35d5c26d7d9f0ce1ec02ea532a5514ebf"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbc5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x164, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c3205af9b1e003fb9a7ea1034f1acf40"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc3a4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc143aad2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dea53cee953b5ec46a2c8984049afb8440e146fde3d25477b8cb097f03c816a1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d52961998d8e12186af431e2167c557b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xcb}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "60f236f5bb65bab96f3b032bc654981876536871bd8f7d53027cc45238393ccf"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x3c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "219a6bbbecba7de6b6d4863bd9ccfa9378b22e3c158c4c12c44acf698945f3a8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cc2eb9a78a30954a113a2c4f7bd80726"}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/69, 0x45, 0x1, &(0x7f00000000c0)=""/202, 0xca}, &(0x7f0000000200)=0x40)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x2f8, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x124, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "44bb7ccbac281eeedf4af947c3bf60c35d5c26d7d9f0ce1ec02ea532a5514ebf"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbc5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x164, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c3205af9b1e003fb9a7ea1034f1acf40"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc3a4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc143aad2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dea53cee953b5ec46a2c8984049afb8440e146fde3d25477b8cb097f03c816a1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d52961998d8e12186af431e2167c557b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xcb}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "60f236f5bb65bab96f3b032bc654981876536871bd8f7d53027cc45238393ccf"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x3c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "219a6bbbecba7de6b6d4863bd9ccfa9378b22e3c158c4c12c44acf698945f3a8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cc2eb9a78a30954a113a2c4f7bd80726"}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/69, 0x45, 0x1, &(0x7f00000000c0)=""/202, 0xca}, &(0x7f0000000200)=0x40) (async)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)

00:32:58 executing program 3:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000007000/0x3000)=nil, 0x3000}})
munmap(&(0x7f0000008000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, 0xffffffffffffffff, 0x4a000)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

00:32:58 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, 0xffffffffffffffff, 0x0)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000007000/0x1000)=nil, 0x1000}, 0x1})

00:32:58 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3}) (async)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) (async)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async, rerun: 64)
r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64)
r1 = socket(0x8, 0x4, 0x40)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "bbf8a3fee76ccafa", "32e5446464727d8fd01ce50941d82cea89193af6eeaa9444594042713d38fe6b", "b1e43ff9", "156dcd51de24b056"}, 0x38)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000221000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/99, 0x63, 0x1, &(0x7f00000000c0)=""/209, 0xd1}, &(0x7f0000000200)=0x40) (async, rerun: 64)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="e5ee1db4e584fd1341df1a0c92635a69", 0x10) (async)
r3 = pkey_alloc(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pkey_mprotect(&(0x7f0000221000/0x4000)=nil, 0x4000, 0x8, r3)

00:32:58 executing program 1:
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40011)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x2f8, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x124, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "44bb7ccbac281eeedf4af947c3bf60c35d5c26d7d9f0ce1ec02ea532a5514ebf"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbc5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x164, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c3205af9b1e003fb9a7ea1034f1acf40"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc3a4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc143aad2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dea53cee953b5ec46a2c8984049afb8440e146fde3d25477b8cb097f03c816a1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d52961998d8e12186af431e2167c557b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xcb}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "60f236f5bb65bab96f3b032bc654981876536871bd8f7d53027cc45238393ccf"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x3c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "219a6bbbecba7de6b6d4863bd9ccfa9378b22e3c158c4c12c44acf698945f3a8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cc2eb9a78a30954a113a2c4f7bd80726"}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/69, 0x45, 0x1, &(0x7f00000000c0)=""/202, 0xca}, &(0x7f0000000200)=0x40)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x2f8, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x124, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "44bb7ccbac281eeedf4af947c3bf60c35d5c26d7d9f0ce1ec02ea532a5514ebf"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbc5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x164, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c3205af9b1e003fb9a7ea1034f1acf40"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc3a4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc143aad2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dea53cee953b5ec46a2c8984049afb8440e146fde3d25477b8cb097f03c816a1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d52961998d8e12186af431e2167c557b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xcb}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "60f236f5bb65bab96f3b032bc654981876536871bd8f7d53027cc45238393ccf"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x3c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "219a6bbbecba7de6b6d4863bd9ccfa9378b22e3c158c4c12c44acf698945f3a8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cc2eb9a78a30954a113a2c4f7bd80726"}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/69, 0x45, 0x1, &(0x7f00000000c0)=""/202, 0xca}, &(0x7f0000000200)=0x40) (async)

00:32:58 executing program 3:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000007000/0x3000)=nil, 0x3000}})
munmap(&(0x7f0000008000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, 0xffffffffffffffff, 0x4a000)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000007000/0x3000)=nil, 0x3000}}) (async)
munmap(&(0x7f0000008000/0x3000)=nil, 0x3000) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, 0xffffffffffffffff, 0x4a000) (async)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)

00:32:58 executing program 4:
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000008, 0x4025832, 0xffffffffffffffff, 0x0)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000007000/0x1000)=nil, 0x1000}, 0x1})

00:32:58 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0xff, "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"})

00:32:58 executing program 4:
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x4025832, 0xffffffffffffffff, 0x0)

00:32:58 executing program 3:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000007000/0x3000)=nil, 0x3000}})
munmap(&(0x7f0000008000/0x3000)=nil, 0x3000) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, 0xffffffffffffffff, 0x4a000) (async)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000007000/0x1000)=nil, 0x1000}, 0x1})

00:32:58 executing program 1:
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000040)={0x1})
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket(0x8, 0x4, 0x40)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "bbf8a3fee76ccafa", "32e5446464727d8fd01ce50941d82cea89193af6eeaa9444594042713d38fe6b", "b1e43ff9", "156dcd51de24b056"}, 0x38)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000221000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/99, 0x63, 0x1, &(0x7f00000000c0)=""/209, 0xd1}, &(0x7f0000000200)=0x40) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="e5ee1db4e584fd1341df1a0c92635a69", 0x10) (async)
r3 = pkey_alloc(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
pkey_mprotect(&(0x7f0000221000/0x4000)=nil, 0x4000, 0x8, r3) (rerun: 64)

00:32:58 executing program 4:
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

00:32:58 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0xff, "13bc5e7c129e7ac6b4981558a2229d1055e660a5300e8c32425ad1483ff144e5da6efe3bbc6e3aff4e7f30e01eb1852776df7916902b4888225c63bc8c30fbcb00d8a21fc877bbb5048c051d246f43be294d89580761da53eb90ff351f1022e849a7c7efab14477a346dac21c698e40f2bf7966eb8d44c630de9364b7fd1ffb4206471f4cfeec03cccd00bb962caf5737845f555d66012b77b93cf6fa7b54bcb2a6fc9ecc3dadb63a4c38ce8227f47b186d6ed30c0e237cbc12dd68a7182253e183121d678ec21d0df999d1404a981ed9fc68ac2485d14478d4d9d8a0d4d3a3860bdc0a8f6b77352147ad780db7e7db7d0be7077f81941c9922e5d71db950147b031d59b8dd30e0a3194584f0bf52ec91a121b2a56ce7d90831a036c1903dd082df7b2b2a02cc2bce0334738c379545463e7afc783365a3a946512dc88df10e306b41ed3fb9f593e11d855cb0338b4e64b0cca62d13d1e09f38861096715e5f90bc8a4aa184f0d2dbe756c29d0d3c355b8c712e6b6dd1a17c456cb53e01e2ac031941acda57f50993a69a711b5e16a7e0e8eb3e824d995148026340d0945daceb215dae3e491394987e1520921584faf716f215c4cc002ade09500a756eb895f72bf391716f7cf858d86b610dfd3954f486d2ac73c576a96be72ec5a32c4231a7d58938a2b4d2a68a4d40d20f2eb0dd8503c1fa203b27407cb026ec944512314"})
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0xff, "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"}) (async)

00:32:58 executing program 1:
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000040)={0x1}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:58 executing program 4:
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000008000/0x1000)=nil, 0x1000}, 0x7})

00:32:58 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r0})
munmap(&(0x7f0000006000/0x3000)=nil, 0x3000)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x54, 0x104, 0x0)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000008000/0x1000)=nil, 0x1000}, 0x7})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
userfaultfd(0x800) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000008000/0x1000)=nil, 0x1000}, 0x7}) (async)

00:32:58 executing program 4:
mmap$dsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

00:32:58 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0xff, "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"})

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x54, 0x104, 0x0)

00:32:58 executing program 1:
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000040)={0x1}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x4) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:58 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r0})
munmap(&(0x7f0000006000/0x3000)=nil, 0x3000)

00:32:58 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000008000/0x1000)=nil, 0x1000}, 0x7})

00:32:58 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x54, 0x104, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x54, 0x104, 0x0) (async)

00:32:58 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000))
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "587d4d03041c3b6e", "e425da8616711a44419957385fcd7194", '\x00', "56082df2eb635adc"}, 0x28)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:58 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r0})
munmap(&(0x7f0000006000/0x3000)=nil, 0x3000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r0}) (async)
munmap(&(0x7f0000006000/0x3000)=nil, 0x3000) (async)

00:32:58 executing program 1:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x644001, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:58 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1410, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x83000000)

00:32:58 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x1, 0x6)

00:32:58 executing program 1:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x644001, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:58 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000))
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "587d4d03041c3b6e", "e425da8616711a44419957385fcd7194", '\x00', "56082df2eb635adc"}, 0x28)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "587d4d03041c3b6e", "e425da8616711a44419957385fcd7194", '\x00', "56082df2eb635adc"}, 0x28) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:32:58 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1410, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x83000000)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1410, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x83000000) (async)

00:32:58 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)

00:32:58 executing program 1:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x644001, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:58 executing program 3:
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x14000, 0x3, &(0x7f0000007000/0x14000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
munlock(&(0x7f0000005000/0x3000)=nil, 0x3000)
pkey_mprotect(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000)
shmget(0x2, 0x4000, 0x1000, &(0x7f0000008000/0x4000)=nil)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_status(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x300000a, 0x810, r0, 0x82000000)
socketpair(0x30, 0x4, 0x5, &(0x7f0000000040))

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x1, 0x6)

00:32:58 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000))
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "587d4d03041c3b6e", "e425da8616711a44419957385fcd7194", '\x00', "56082df2eb635adc"}, 0x28)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "587d4d03041c3b6e", "e425da8616711a44419957385fcd7194", '\x00', "56082df2eb635adc"}, 0x28) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:32:58 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:58 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x1, 0x6)

00:32:58 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1410, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x83000000)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1410, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x83000000) (async)

00:32:58 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080), 0x85, 0x0)

00:32:59 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1f, 0x6, 0x61, &(0x7f0000000000)="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"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x250000, 0x0)

00:32:59 executing program 3:
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x14000, 0x3, &(0x7f0000007000/0x14000)=nil) (async, rerun: 64)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 64)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
munlock(&(0x7f0000005000/0x3000)=nil, 0x3000) (async)
pkey_mprotect(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) (async, rerun: 32)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) (async, rerun: 32)
shmget(0x2, 0x4000, 0x1000, &(0x7f0000008000/0x4000)=nil)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32)
mmap$snddsp_status(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x300000a, 0x810, r0, 0x82000000) (async, rerun: 32)
socketpair(0x30, 0x4, 0x5, &(0x7f0000000040))

00:32:59 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:59 executing program 5:
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x55a, 0x400, 0x0)
mmap$usbfs(&(0x7f0000a57000/0x4000)=nil, 0x4000, 0x2, 0x8010, 0xffffffffffffffff, 0x1)

00:32:59 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1f, 0x6, 0x61, &(0x7f0000000000)="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"}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x250000, 0x0)

00:32:59 executing program 3:
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x14000, 0x3, &(0x7f0000007000/0x14000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
munlock(&(0x7f0000005000/0x3000)=nil, 0x3000)
pkey_mprotect(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) (async)
shmget(0x2, 0x4000, 0x1000, &(0x7f0000008000/0x4000)=nil) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$snddsp_status(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x300000a, 0x810, r0, 0x82000000)
socketpair(0x30, 0x4, 0x5, &(0x7f0000000040))

00:32:59 executing program 2:
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:59 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080), 0x85, 0x0)

00:32:59 executing program 5:
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x55a, 0x400, 0x0) (async)
mmap$usbfs(&(0x7f0000a57000/0x4000)=nil, 0x4000, 0x2, 0x8010, 0xffffffffffffffff, 0x1)

00:32:59 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)

00:32:59 executing program 2:
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:59 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1f, 0x6, 0x61, &(0x7f0000000000)="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"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x250000, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1f, 0x6, 0x61, &(0x7f0000000000)="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"}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x250000, 0x0) (async)

00:32:59 executing program 3:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

00:32:59 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080), 0x85, 0x0)

00:32:59 executing program 5:
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x55a, 0x400, 0x0) (async)
mmap$usbfs(&(0x7f0000a57000/0x4000)=nil, 0x4000, 0x2, 0x8010, 0xffffffffffffffff, 0x1)

00:32:59 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)

00:32:59 executing program 2:
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:32:59 executing program 3:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) (async)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

00:32:59 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:32:59 executing program 5:
mbind(&(0x7f000015d000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x6)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
mmap$snddsp_control(&(0x7f000015f000/0x4000)=nil, 0x1000, 0x3000008, 0x100010, r0, 0x83000000)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f000015c000/0x4000)=nil})
r1 = socket(0x27, 0x80000, 0x3)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1412, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0xf28fc1643dd1a75d)

00:32:59 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)

00:32:59 executing program 1:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4)
mbind(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xfffffffffffffffd, 0x81, 0x0)

00:32:59 executing program 2:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:32:59 executing program 3:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

00:32:59 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:32:59 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:32:59 executing program 1:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4)
mbind(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xfffffffffffffffd, 0x81, 0x0)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) (async)
mbind(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xfffffffffffffffd, 0x81, 0x0) (async)

00:32:59 executing program 5:
mbind(&(0x7f000015d000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x6)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
mmap$snddsp_control(&(0x7f000015f000/0x4000)=nil, 0x1000, 0x3000008, 0x100010, r0, 0x83000000) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f000015c000/0x4000)=nil}) (async)
r1 = socket(0x27, 0x80000, 0x3)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1412, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0xf28fc1643dd1a75d)

00:32:59 executing program 2:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) (async)

00:32:59 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mmap$fb(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x21000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000005000/0x1000)=nil, 0x1000})

00:32:59 executing program 5:
mbind(&(0x7f000015d000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x6)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
mmap$snddsp_control(&(0x7f000015f000/0x4000)=nil, 0x1000, 0x3000008, 0x100010, r0, 0x83000000) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f000015c000/0x4000)=nil}) (async)
r1 = socket(0x27, 0x80000, 0x3)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1412, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0xf28fc1643dd1a75d)

00:32:59 executing program 1:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4)
mbind(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xfffffffffffffffd, 0x81, 0x0)

00:32:59 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:32:59 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:32:59 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000), 0x0, 0x0) (async)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mmap$fb(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x21000) (async)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000005000/0x1000)=nil, 0x1000})

00:32:59 executing program 2:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:32:59 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x16)

00:32:59 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:32:59 executing program 1:
rt_sigpending(&(0x7f0000000040), 0x8)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000382000/0x3000)=nil, 0x3000})

00:32:59 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x1, 0x2)
mmap$binder(&(0x7f0000222000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6)

00:32:59 executing program 2:
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001100)=[@timestamp, @mss={0x2, 0x4}, @window={0x3, 0x1ff, 0x1f}, @sack_perm], 0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/123, 0x7b}, &(0x7f00000010c0)=0x40)

00:32:59 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64)
syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSIG(r0, 0x40045436, 0x16)

00:32:59 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:32:59 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mmap$fb(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x21000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000005000/0x1000)=nil, 0x1000})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000), 0x0, 0x0) (async)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
mmap$fb(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x21000) (async)
userfaultfd(0x80001) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000005000/0x1000)=nil, 0x1000}) (async)

00:32:59 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x1, 0x2)
mmap$binder(&(0x7f0000222000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x1, 0x2) (async)
mmap$binder(&(0x7f0000222000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6) (async)

00:32:59 executing program 1:
rt_sigpending(&(0x7f0000000040), 0x8) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000382000/0x3000)=nil, 0x3000})

00:32:59 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:32:59 executing program 2:
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001100)=[@timestamp, @mss={0x2, 0x4}, @window={0x3, 0x1ff, 0x1f}, @sack_perm], 0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/123, 0x7b}, &(0x7f00000010c0)=0x40)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001100)=[@timestamp, @mss={0x2, 0x4}, @window={0x3, 0x1ff, 0x1f}, @sack_perm], 0x4) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/123, 0x7b}, &(0x7f00000010c0)=0x40) (async)

00:32:59 executing program 1:
rt_sigpending(&(0x7f0000000040), 0x8) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000382000/0x3000)=nil, 0x3000})

00:32:59 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x1, 0x2)
mmap$binder(&(0x7f0000222000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x1, 0x2) (async)
mmap$binder(&(0x7f0000222000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6) (async)

00:32:59 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2f41, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil})
pkey_mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x200000a, 0xffffffffffffffff)
mmap$snddsp_status(&(0x7f0000006000/0x3000)=nil, 0x1000, 0x4, 0x20010, 0xffffffffffffffff, 0x82000000)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x7, 0x0)

00:32:59 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:32:59 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x16)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSIG(r0, 0x40045436, 0x16) (async)

00:32:59 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2f41, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil})
pkey_mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x200000a, 0xffffffffffffffff) (async)
mmap$snddsp_status(&(0x7f0000006000/0x3000)=nil, 0x1000, 0x4, 0x20010, 0xffffffffffffffff, 0x82000000) (async)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x7, 0x0)

00:32:59 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x7f, 0x1, 0x13, 0x0, 0xe8, 0x8106a, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0x9}, 0x4, 0x7fffffff, 0x7, 0x5, 0x1, 0x7fff, 0x3, 0x0, 0x2000000, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xa)
perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1, 0x1, 0xff, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffff0000, 0x2}, 0x4590, 0x1ff, 0x9, 0x9, 0xffffffffffffff81, 0x0, 0x8, 0x0, 0x1, 0x0, 0x800}, r0, 0xffffffffffffffff, r1, 0xa)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000222000/0x4000)=nil, 0x4000, &(0x7f0000000080)='/sys/kernel/debug/sync/info\x00')
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:32:59 executing program 2:
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001100)=[@timestamp, @mss={0x2, 0x4}, @window={0x3, 0x1ff, 0x1f}, @sack_perm], 0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/123, 0x7b}, &(0x7f00000010c0)=0x40)

00:32:59 executing program 1:
syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x202000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:32:59 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:32:59 executing program 1:
syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x202000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x202000) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)

00:32:59 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x7f, 0x1, 0x13, 0x0, 0xe8, 0x8106a, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0x9}, 0x4, 0x7fffffff, 0x7, 0x5, 0x1, 0x7fff, 0x3, 0x0, 0x2000000, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xa)
perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1, 0x1, 0xff, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffff0000, 0x2}, 0x4590, 0x1ff, 0x9, 0x9, 0xffffffffffffff81, 0x0, 0x8, 0x0, 0x1, 0x0, 0x800}, r0, 0xffffffffffffffff, r1, 0xa) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000222000/0x4000)=nil, 0x4000, &(0x7f0000000080)='/sys/kernel/debug/sync/info\x00')
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:32:59 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2f41, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil})
pkey_mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x200000a, 0xffffffffffffffff) (async, rerun: 32)
mmap$snddsp_status(&(0x7f0000006000/0x3000)=nil, 0x1000, 0x4, 0x20010, 0xffffffffffffffff, 0x82000000) (rerun: 32)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x7, 0x0)

00:32:59 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000009000/0x1000)=nil, 0x1000}, 0x6})

00:32:59 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
ioctl$VT_WAITACTIVE(r1, 0x5607)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x8, 0x2, 0x7, 0x6, 0xa, "56243abdb101c221c1408e16f2469434a02bb3", 0x0, 0xe6c})
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0x0, 0x0, 0x8})
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080))
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100))
r4 = syz_open_dev$dri(&(0x7f0000000140), 0x100000001, 0xc000)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x14001)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r5})

00:32:59 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:32:59 executing program 1:
syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x202000) (async, rerun: 32)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (rerun: 32)

00:32:59 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x7f, 0x1, 0x13, 0x0, 0xe8, 0x8106a, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0x9}, 0x4, 0x7fffffff, 0x7, 0x5, 0x1, 0x7fff, 0x3, 0x0, 0x2000000, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xa)
perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1, 0x1, 0xff, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffff0000, 0x2}, 0x4590, 0x1ff, 0x9, 0x9, 0xffffffffffffff81, 0x0, 0x8, 0x0, 0x1, 0x0, 0x800}, r0, 0xffffffffffffffff, r1, 0xa) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000222000/0x4000)=nil, 0x4000, &(0x7f0000000080)='/sys/kernel/debug/sync/info\x00') (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:32:59 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x100000001, 0x8380)
mmap$snddsp_status(&(0x7f0000005000/0x3000)=nil, 0x1000, 0x2000001, 0x30, r0, 0x82000000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_status(&(0x7f0000005000/0x4000)=nil, 0x1000, 0x8, 0x4010, r1, 0x82000000)

00:32:59 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:32:59 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
ioctl$VT_WAITACTIVE(r1, 0x5607)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x8, 0x2, 0x7, 0x6, 0xa, "56243abdb101c221c1408e16f2469434a02bb3", 0x0, 0xe6c}) (async)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0x0, 0x0, 0x8}) (async)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) (async)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100))
r4 = syz_open_dev$dri(&(0x7f0000000140), 0x100000001, 0xc000) (async)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x14001)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r5})

00:32:59 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 64)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0) (async, rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) (async, rerun: 32)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async, rerun: 32)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000009000/0x1000)=nil, 0x1000}, 0x6})

00:32:59 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0))
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000222000/0x3000)=nil})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000200))
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000001c0)=""/32)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000180))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000140)={0x6, 0x24, 0x8})
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000222000/0x3000)=nil})
mprotect(&(0x7f0000223000/0x3000)=nil, 0x3000, 0x8)

00:32:59 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101402, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f000037e000/0x2000)=nil, 0x1000, 0x6, 0x20010, r1, 0x83000000)
pkey_mprotect(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x2000004, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7)
mmap$snddsp_control(&(0x7f000037f000/0x2000)=nil, 0x1000, 0x8, 0x810, r0, 0x83000000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x1f, 0x5, 0x2, 0x0, 0x0, 0x1, 0x600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x100, 0x5}, 0x5c0, 0x9, 0x80, 0x3, 0x2, 0x1, 0x1, 0x0, 0x4, 0x0, 0x100000000}, r2, 0xc, r0, 0x6)

00:32:59 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x100000001, 0x8380)
mmap$snddsp_status(&(0x7f0000005000/0x3000)=nil, 0x1000, 0x2000001, 0x30, r0, 0x82000000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap$snddsp_status(&(0x7f0000005000/0x4000)=nil, 0x1000, 0x8, 0x4010, r1, 0x82000000)

00:32:59 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:32:59 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
ioctl$VT_WAITACTIVE(r1, 0x5607) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (rerun: 32)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x8, 0x2, 0x7, 0x6, 0xa, "56243abdb101c221c1408e16f2469434a02bb3", 0x0, 0xe6c}) (async)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0x0, 0x0, 0x8})
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) (async)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100)) (async)
r4 = syz_open_dev$dri(&(0x7f0000000140), 0x100000001, 0xc000) (async)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x14001)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r5})

00:32:59 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000222000/0x3000)=nil}) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000200)) (async, rerun: 64)
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000001c0)=""/32) (async, rerun: 64)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000180)) (async)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000140)={0x6, 0x24, 0x8})
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000222000/0x3000)=nil})
mprotect(&(0x7f0000223000/0x3000)=nil, 0x3000, 0x8)

00:32:59 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101402, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap$snddsp_control(&(0x7f000037e000/0x2000)=nil, 0x1000, 0x6, 0x20010, r1, 0x83000000) (async)
pkey_mprotect(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x2000004, 0xffffffffffffffff) (async)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7)
mmap$snddsp_control(&(0x7f000037f000/0x2000)=nil, 0x1000, 0x8, 0x810, r0, 0x83000000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x1f, 0x5, 0x2, 0x0, 0x0, 0x1, 0x600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x100, 0x5}, 0x5c0, 0x9, 0x80, 0x3, 0x2, 0x1, 0x1, 0x0, 0x4, 0x0, 0x100000000}, r2, 0xc, r0, 0x6)

00:32:59 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x100000001, 0x8380)
mmap$snddsp_status(&(0x7f0000005000/0x3000)=nil, 0x1000, 0x2000001, 0x30, r0, 0x82000000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_status(&(0x7f0000005000/0x4000)=nil, 0x1000, 0x8, 0x4010, r1, 0x82000000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x100000001, 0x8380) (async)
mmap$snddsp_status(&(0x7f0000005000/0x3000)=nil, 0x1000, 0x2000001, 0x30, r0, 0x82000000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap$snddsp_status(&(0x7f0000005000/0x4000)=nil, 0x1000, 0x8, 0x4010, r1, 0x82000000) (async)

00:32:59 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000009000/0x1000)=nil, 0x1000}, 0x6})

00:32:59 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000009000/0x1000)=nil, 0x1000}, 0x6})

00:32:59 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101402, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f000037e000/0x2000)=nil, 0x1000, 0x6, 0x20010, r1, 0x83000000)
pkey_mprotect(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x2000004, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) (async)
mmap$snddsp_control(&(0x7f000037f000/0x2000)=nil, 0x1000, 0x8, 0x810, r0, 0x83000000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x1f, 0x5, 0x2, 0x0, 0x0, 0x1, 0x600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x100, 0x5}, 0x5c0, 0x9, 0x80, 0x3, 0x2, 0x1, 0x1, 0x0, 0x4, 0x0, 0x100000000}, r2, 0xc, r0, 0x6)

00:32:59 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000222000/0x3000)=nil}) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async, rerun: 64)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async, rerun: 32)
ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000200)) (async, rerun: 32)
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000001c0)=""/32) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000180))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000140)={0x6, 0x24, 0x8}) (async)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000222000/0x3000)=nil}) (async)
mprotect(&(0x7f0000223000/0x3000)=nil, 0x3000, 0x8)

00:32:59 executing program 3:
mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:32:59 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000000000/0x3000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00')

00:33:00 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = shmget(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000009000/0x1000)=nil, 0x1000}, 0x6})

00:33:00 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1c, 0x6, 0x1cd, &(0x7f0000000000)="a05bc9f86f263f16691c758845bad57585ef275910a81bdd86688ae7edf6610b273f34e343605dfcc56fe5b732811a5a2e0a65a624bdc0aa9c74ebe4bac6e669297254fe292a827013623386ee1c4df156ecc5d54c2ff2a701ce02b4d76e8221c8ac96a21cc97093bc968f4e1b96c0251bd2ad90eb8c92e5008c96bf327c3411ca1507cffcf87b583dfa53e9bd45135688ff1b0bd99821434c85f9e62fc373a7f29d6b29509ff882415e68acd0516bbd3f50eb683052f1daea3b1821ee0191856e6d622a3943f214392322c52c5a21403e97024e9ae901245ee93ca43cda4d19d66cf9fb9a4c106c5a3311027e5604acda4f8a1b7209dc678791eb185a0181ee256972c72e2f52d15bb1c50983fb24a52163ebd0e23a169a6e739593072f0eb1f8164f91e4a44c35ef92de78200a31a8d82dd4c12a64223131d41c52df54b6d08e37a661bf52b85825eb70069f7ba0600e408ddec6587a24f4692ae66f5a2fafd269ef49339b308492f18adb6717edc71566118e0ddfd66ed90edc8b78459f5b81cbd06550959aff10158d4b43b857287cc3e14963f4c99c73a015a84cc270dfd81f02d502ef884c1e2b885cd7849efb12542ebea47c062fbaffb58ce78e026d8060122bf64645376f1edc44d591c9a4676e62bc329273927a2af7ecaffc3e6cea028d81838cd0b1235698661635aa1e7ad00734089dc1d37c137da30217166e483778108091ad5c9323fbb7832ade126d2ce4bfa4150c2795c3285700e1fbd6329ff9949d8bc58c2cc9ac8cdd8c5c52397eb9e75f6a5e5891f67f38da73fdf6b5c418f975c97ca0b8c9216e929dbd194da2c0865d6d927735d6d98026039540bbd739fd05056fe3416af16fa144d0b49efac2fff14f78b7ec1cd878d1c9231507494954ef6adc9bddbec60e0c929fce66e771f522103f3774fcfa48122921809ad0c10b73e665dcfea72604c599b3c7cb9ef44e04f5968a1a21e05fca59a666a8a9f74b881510c3c5494ed022a7b41e402df1fdb8892c45c406dd0ec109a393ba6e3e5fb5adeab08dce13b532c252c66b060e6619a5cf1d361c3dc82a89dd9dbce5f957d3001f0232e4c04ef56dd455be349fa962716c9798ac45eab915af4c7fcf561e02962a464ab88855b12222396e35ed947d9eb02475696de9662ba532be327a54336fd7b98ca3f8fe8fde1fd84540df8b0252310331a4e27b6f138ce382bf6aeeb5af3fee28fbe05c7c4ba8b6a4a7a81b381ba0de56d6fdf99eb0f6c8cbed8ba7a43d846849cb95f9820371fb42db0b73b8119c0d70fa11a562c3622d050c483048db686523e4029ac3b28930c127af8864ee0a5946288e955ff4488630bbe728e93579297ba5fc4777b721bbcdba38042b5e83e9d2a2d5c615c20335ea1092419252883d5b515120c7183120579bb7a2537e4a5e50a3776077a3a22b"})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil})

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000221000/0x2000)=nil, 0x2000}, 0x1})

00:33:00 executing program 3:
mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000000000/0x3000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00')
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000000000/0x3000)=nil) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00') (async)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000009000/0x1000)=nil, 0x1000}, 0x6})

00:33:00 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = shmget(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
shmget(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) (async)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) (async)

00:33:00 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1c, 0x6, 0x1cd, &(0x7f0000000000)="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"})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil})
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0)) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500)) (async)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10) (async)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1c, 0x6, 0x1cd, &(0x7f0000000000)="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"}) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil}) (async)

00:33:00 executing program 3:
mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000000000/0x3000)=nil) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00')

00:33:00 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
r0 = shmget(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000)

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000221000/0x2000)=nil, 0x2000}, 0x1})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000221000/0x2000)=nil, 0x2000}, 0x1}) (async)

00:33:00 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0)) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500)) (async)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10) (async)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1c, 0x6, 0x1cd, &(0x7f0000000000)="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"})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil})

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2000000)

00:33:00 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x8081, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r2, 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000140)='1', 0x1)

00:33:00 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2000000)

00:33:00 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x8081, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 64)
r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r2, 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async, rerun: 64)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) (async)
timerfd_gettime(r0, &(0x7f0000000000)) (async)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000140)='1', 0x1)

00:33:00 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async, rerun: 32)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000221000/0x2000)=nil, 0x2000}, 0x1}) (rerun: 32)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2000000)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0)

00:33:00 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xa)

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = shmget(0x2, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil)
mmap$snddsp_control(&(0x7f0000220000/0x3000)=nil, 0x1000, 0x2000000, 0x810, 0xffffffffffffffff, 0x83000000)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000)
mmap$fb(&(0x7f000021f000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0x52000)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0xe1f1, 0x6, 0x1)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00'})

00:33:00 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) (async)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xa)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
munmap(&(0x7f0000007000/0x1000)=nil, 0x1000)

00:33:00 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x8081, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r2, 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000140)='1', 0x1)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)

00:33:00 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) (async)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xa)

00:33:00 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = shmget(0x2, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil)
mmap$snddsp_control(&(0x7f0000220000/0x3000)=nil, 0x1000, 0x2000000, 0x810, 0xffffffffffffffff, 0x83000000)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async)
mmap$fb(&(0x7f000021f000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0x52000) (async)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0xe1f1, 0x6, 0x1)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
munmap(&(0x7f0000007000/0x1000)=nil, 0x1000)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

00:33:00 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000bc31480827a600"/260], 0x104, 0x2, 0x1000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/4096)
shmget(0x1, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
munmap(&(0x7f0000007000/0x1000)=nil, 0x1000)

00:33:00 executing program 3:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000006000/0x4000)=nil, 0x4000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000)=0xbc53283544568d0e, 0x4)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = shmget(0x2, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil)
mmap$snddsp_control(&(0x7f0000220000/0x3000)=nil, 0x1000, 0x2000000, 0x810, 0xffffffffffffffff, 0x83000000) (async)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async)
mmap$fb(&(0x7f000021f000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0x52000)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0xe1f1, 0x6, 0x1)

00:33:00 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x8, 0x20010, 0xffffffffffffffff, 0x6c374000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x230a02, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "aa0a22076d55a1eb", "6a42613cfc2bda773f0ab1c712ae06ea", '\bj<2', "f2257a266c974e2d"}, 0x28)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000006000/0x2000)=nil, 0x1000, 0x1000003, 0x8010, r1, 0x83000000)

00:33:00 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0) (async, rerun: 32)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000bc31480827a600"/260], 0x104, 0x2, 0x1000) (rerun: 32)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/4096) (async)
shmget(0x1, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})

00:33:00 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:00 executing program 5:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040))
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000080)=0x13, 0x800000005, 0x0)

00:33:00 executing program 3:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000)=0xbc53283544568d0e, 0x4)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x8, 0x20010, 0xffffffffffffffff, 0x6c374000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x230a02, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "aa0a22076d55a1eb", "6a42613cfc2bda773f0ab1c712ae06ea", '\bj<2', "f2257a266c974e2d"}, 0x28)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000006000/0x2000)=nil, 0x1000, 0x1000003, 0x8010, r1, 0x83000000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x8, 0x20010, 0xffffffffffffffff, 0x6c374000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x230a02, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "aa0a22076d55a1eb", "6a42613cfc2bda773f0ab1c712ae06ea", '\bj<2', "f2257a266c974e2d"}, 0x28) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap$snddsp_control(&(0x7f0000006000/0x2000)=nil, 0x1000, 0x1000003, 0x8010, r1, 0x83000000) (async)

00:33:00 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:00 executing program 3:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000)=0xbc53283544568d0e, 0x4)

00:33:00 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000bc31480827a600"/260], 0x104, 0x2, 0x1000) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/4096) (async)
shmget(0x1, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})

00:33:00 executing program 5:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000080)=0x13, 0x800000005, 0x0)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)

00:33:00 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:00 executing program 5:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040))
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000080)=0x13, 0x800000005, 0x0)
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000080)=0x13, 0x800000005, 0x0) (async)

00:33:00 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x341080, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040))
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3f, 0x40)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, 0x28})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0))
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x8, 0x20010, 0xffffffffffffffff, 0x6c374000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x230a02, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "aa0a22076d55a1eb", "6a42613cfc2bda773f0ab1c712ae06ea", '\bj<2', "f2257a266c974e2d"}, 0x28) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000006000/0x2000)=nil, 0x1000, 0x1000003, 0x8010, r1, 0x83000000)

00:33:00 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (rerun: 64)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

00:33:00 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x341080, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040))
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3f, 0x40)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, 0x28}) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:00 executing program 2:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:00 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)

00:33:00 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000380000/0x1000)=nil, 0x7800)

00:33:00 executing program 2:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:00 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff) (async)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:00 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:00 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000380000/0x1000)=nil, 0x7800)

00:33:00 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x341080, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040))
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3f, 0x40)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, 0x28}) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)

00:33:00 executing program 2:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (rerun: 64)

00:33:00 executing program 0:
getrusage(0x1, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:00 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) (async, rerun: 64)
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) (rerun: 64)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000380000/0x1000)=nil, 0x7800)

00:33:00 executing program 3:
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000003000/0x4000)=nil)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)

00:33:00 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x101, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff) (async)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)

00:33:00 executing program 3:
msgctl$IPC_RMID(0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000003000/0x4000)=nil)

00:33:00 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)

00:33:00 executing program 3:
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000003000/0x4000)=nil)

00:33:00 executing program 0:
getrusage(0x1, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
getrusage(0x1, &(0x7f0000000000)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff2000/0xd000)=nil, 0xd000})

00:33:00 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000380000/0x1000)=nil, 0x7800)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000006000/0x1000)=nil, 0x1000}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x402804}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x10, 0x70bd2b, 0x4, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x20004084)
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000008000/0x2000)=nil)
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000006000/0x3000)=nil, 0x3000}, 0x1})

00:33:00 executing program 1:
mprotect(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x1000001)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x1000)=nil, 0x1000})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$dsp(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x100000a, 0x100010, 0xffffffffffffffff, 0x0)

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff2000/0xd000)=nil, 0xd000})

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000006000/0x1000)=nil, 0x1000}}) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x402804}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x10, 0x70bd2b, 0x4, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x20004084)
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000008000/0x2000)=nil)
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000006000/0x3000)=nil, 0x3000}, 0x1})

00:33:00 executing program 1:
mprotect(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x1000001) (async, rerun: 32)
r0 = userfaultfd(0x800) (rerun: 32)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x1000)=nil, 0x1000}) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$dsp(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x100000a, 0x100010, 0xffffffffffffffff, 0x0)

00:33:00 executing program 0:
getrusage(0x1, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
getrusage(0x1, &(0x7f0000000000)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async, rerun: 64)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff2000/0xd000)=nil, 0xd000})

00:33:00 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000380000/0x1000)=nil, 0x7800)

00:33:00 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1d24a000)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff)
openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:00 executing program 1:
mprotect(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x1000001)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x1000)=nil, 0x1000})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$dsp(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x100000a, 0x100010, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x1000001) (async)
userfaultfd(0x800) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x1000)=nil, 0x1000}) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mmap$dsp(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x100000a, 0x100010, 0xffffffffffffffff, 0x0) (async)

00:33:00 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000006000/0x1000)=nil, 0x1000}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x402804}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x10, 0x70bd2b, 0x4, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x20004084)
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000008000/0x2000)=nil)
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000006000/0x3000)=nil, 0x3000}, 0x1})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000006000/0x1000)=nil, 0x1000}}) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x402804}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x10, 0x70bd2b, 0x4, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x20004084) (async)
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000008000/0x2000)=nil) (async)
userfaultfd(0x80000) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000006000/0x3000)=nil, 0x3000}, 0x1}) (async)

00:33:00 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:00 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r0, &(0x7f0000380000/0x1000)=nil, 0x7800)

00:33:00 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1d24a000)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff)
openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1d24a000) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) (async)
openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:00 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mremap(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000382000/0x3000)=nil)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x1000)=nil, 0x1000}})

00:33:00 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:00 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x10001, 0x101, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000220000/0x4000)=nil})

00:33:01 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x10001, 0x101, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000220000/0x4000)=nil})

00:33:01 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x2000, 0x7, {0x0, 0xea60}, {0x2, 0xc, 0x0, 0xf7, 0x1, 0x40, "28d31cf2"}, 0x0, 0x4, {}, 0x81})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1d24a000)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff)
openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1d24a000) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) (async)
openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:01 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mremap(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000382000/0x3000)=nil)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x1000)=nil, 0x1000}})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mremap(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000382000/0x3000)=nil) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x1000)=nil, 0x1000}}) (async)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x10001, 0x101, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000220000/0x4000)=nil})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x10001, 0x101, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000220000/0x4000)=nil}) (async)

00:33:01 executing program 0:
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:01 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x2000, 0x7, {0x0, 0xea60}, {0x2, 0xc, 0x0, 0xf7, 0x1, 0x40, "28d31cf2"}, 0x0, 0x4, {}, 0x81})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x2000, 0x7, {0x0, 0xea60}, {0x2, 0xc, 0x0, 0xf7, 0x1, 0x40, "28d31cf2"}, 0x0, 0x4, {}, 0x81}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1401, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

00:33:01 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mremap(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000382000/0x3000)=nil)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x1000)=nil, 0x1000}})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mremap(&(0x7f0000382000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000382000/0x3000)=nil) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x1000)=nil, 0x1000}}) (async)

00:33:01 executing program 0:
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000})

00:33:01 executing program 0:
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:01 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x2000, 0x7, {0x0, 0xea60}, {0x2, 0xc, 0x0, 0xf7, 0x1, 0x40, "28d31cf2"}, 0x0, 0x4, {}, 0x81})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:01 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1401, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

00:33:01 executing program 2:
r0 = gettid()
r1 = socket(0x29, 0x5, 0x0)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4)
setpgid(r0, 0x0)
sched_getparam(r0, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:01 executing program 1:
mbind(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000040)=0x9, 0xd, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x384ac03cde83c113, &(0x7f0000000080)=0x100, 0x9, 0x0)

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async)

00:33:01 executing program 2:
r0 = gettid() (async)
r1 = socket(0x29, 0x5, 0x0)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async)
setpgid(r0, 0x0) (async)
sched_getparam(r0, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:01 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1e, 0x10, r0, 0x3b4e7000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r2=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1, 0x0, 0x0, r2, 0x0, r3], 0x6})
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1401, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

00:33:01 executing program 1:
mbind(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000040)=0x9, 0xd, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 64)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) (rerun: 64)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x384ac03cde83c113, &(0x7f0000000080)=0x100, 0x9, 0x0)

00:33:01 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1e, 0x10, r0, 0x3b4e7000) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={<r1=>0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r2=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1, 0x0, 0x0, r2, 0x0, r3], 0x6})
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:01 executing program 1:
mbind(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000040)=0x9, 0xd, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x384ac03cde83c113, &(0x7f0000000080)=0x100, 0x9, 0x0)

00:33:01 executing program 4:
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 5:
r0 = socket(0xa, 0x800, 0x200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x0, 0x0, 0x46, 0x0, "695ca1d52a536cfbd3cad76a10776185ea1c1a0c2b33336c7e15b500ac1a78b6a3e9623f39b38c29a8328c3865974875fde72b1a2dd04d8e69b8d6d42cea3da62b829180e18a13d4000f21f18ac8a64b"}, 0xd8)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x3f, 0x4)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:01 executing program 2:
r0 = gettid()
r1 = socket(0x29, 0x5, 0x0)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async)
setpgid(r0, 0x0) (async)
sched_getparam(r0, &(0x7f0000000000)) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:01 executing program 4:
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000})

00:33:01 executing program 5:
r0 = socket(0xa, 0x800, 0x200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x0, 0x0, 0x46, 0x0, "695ca1d52a536cfbd3cad76a10776185ea1c1a0c2b33336c7e15b500ac1a78b6a3e9623f39b38c29a8328c3865974875fde72b1a2dd04d8e69b8d6d42cea3da62b829180e18a13d4000f21f18ac8a64b"}, 0xd8)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x3f, 0x4) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:01 executing program 4:
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 5:
r0 = socket(0xa, 0x800, 0x200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x0, 0x0, 0x46, 0x0, "695ca1d52a536cfbd3cad76a10776185ea1c1a0c2b33336c7e15b500ac1a78b6a3e9623f39b38c29a8328c3865974875fde72b1a2dd04d8e69b8d6d42cea3da62b829180e18a13d4000f21f18ac8a64b"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x3f, 0x4) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:01 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1e, 0x10, r0, 0x3b4e7000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r2=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1, 0x0, 0x0, r2, 0x0, r3], 0x6})
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1e, 0x10, r0, 0x3b4e7000) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1, 0x0, 0x0, r2, 0x0, r3], 0x6}) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:01 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)

00:33:01 executing program 1:
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0x2, 0x81, 0x2)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffd000/0x2000)=nil)
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil)
munmap(&(0x7f0000007000/0x4000)=nil, 0x4000)

00:33:01 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0xddacf769aa270b68, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xe0}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x24000090)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil) (async, rerun: 32)
munmap(&(0x7f0000007000/0x4000)=nil, 0x4000) (rerun: 32)

00:33:01 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) (async)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0xddacf769aa270b68, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xe0}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x24000090)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x4) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0xddacf769aa270b68, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xe0}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x24000090) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)

00:33:01 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil)
munmap(&(0x7f0000007000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil) (async)
munmap(&(0x7f0000007000/0x4000)=nil, 0x4000) (async)

00:33:01 executing program 1:
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0x2, 0x81, 0x2)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffd000/0x2000)=nil)
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0x2, 0x81, 0x2) (async)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffd000/0x2000)=nil) (async)
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async)

00:33:01 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) (async)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1000008, 0x8010, r0, 0x83000000)

00:33:01 executing program 1:
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0x2, 0x81, 0x2)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffd000/0x2000)=nil) (async)
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

00:33:01 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1000008, 0x8010, r0, 0x83000000)

00:33:01 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x4) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0xddacf769aa270b68, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xe0}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x24000090) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r0})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:01 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1000008, 0x8010, r0, 0x83000000)

00:33:01 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:01 executing program 5:
mbind(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x2, 0x101, 0x4)

00:33:01 executing program 2:
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091408012cbd7000fedbdf250800010000100000"], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x24008005)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:33:01 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r0}) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0)

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000005000/0x4000)=nil, 0x1a2, 0x4})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r0})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r0})

00:33:01 executing program 2:
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091408012cbd7000fedbdf250800010000100000"], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x24008005)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091408012cbd7000fedbdf250800010000100000"], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x24008005) (async)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) (async)

00:33:01 executing program 5:
mbind(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x2, 0x101, 0x4)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0)

00:33:01 executing program 1:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r0})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:01 executing program 5:
mbind(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x2, 0x101, 0x4)
mbind(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x2, 0x101, 0x4) (async)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0)

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000005000/0x4000)=nil, 0x1a2, 0x4}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r0})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r0})

00:33:01 executing program 2:
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091408012cbd7000fedbdf250800010000100000"], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x24008005) (async)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:33:01 executing program 1:
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x29a4, 0x80000})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, &(0x7f0000000580)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000480)=""/196, 0xc4}, 0x1)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x2, 0x33b, 0x0)
mmap$dsp(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x3bd883b78cdc082, 0x1010, r0, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10)
select(0x40, &(0x7f00000000c0)={0x7, 0x6, 0x1, 0x100, 0x5f7, 0x20, 0x100, 0x4}, &(0x7f00000001c0)={0x4, 0x8, 0xf4cc, 0x5, 0x7f, 0x5, 0x200, 0xeac}, &(0x7f0000000200)={0x800, 0x0, 0x2, 0x4, 0x0, 0x3, 0x5276b41b, 0x3}, &(0x7f0000000240)={0x77359400})

00:33:01 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/143, 0x8f, 0x0, &(0x7f0000000180)=""/132, 0x84}, &(0x7f0000000280)=0x40)
r1 = msgget$private(0x0, 0x52)
r2 = gettid()
setpgid(r2, 0x0)
r3 = gettid()
setpgid(r3, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x1, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0x20, 0x1}, 0x0, 0x0, 0x0, 0xe3e5, 0x1, 0x8, 0x3ff, 0x22, 0x0, 0x5, r2, r3})
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
sched_getparam(r3, &(0x7f0000000080))
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0)
timerfd_gettime(r4, &(0x7f00000002c0))

00:33:01 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000005000/0x4000)=nil, 0x1a2, 0x4})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r0}) (async, rerun: 64)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r0})

00:33:01 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/143, 0x8f, 0x0, &(0x7f0000000180)=""/132, 0x84}, &(0x7f0000000280)=0x40) (async)
r1 = msgget$private(0x0, 0x52) (async)
r2 = gettid()
setpgid(r2, 0x0) (async)
r3 = gettid()
setpgid(r3, 0x0) (async)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x1, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0x20, 0x1}, 0x0, 0x0, 0x0, 0xe3e5, 0x1, 0x8, 0x3ff, 0x22, 0x0, 0x5, r2, r3})
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
sched_getparam(r3, &(0x7f0000000080)) (async)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0)
timerfd_gettime(r4, &(0x7f00000002c0))

00:33:01 executing program 2:
mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r0 = shmget(0x0, 0x4000, 0x4, &(0x7f0000005000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

00:33:01 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:01 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
openat$cgroup_pressure(r0, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1404, 0x300, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40004)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:01 executing program 4:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)

00:33:01 executing program 2:
mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async)
r0 = shmget(0x0, 0x4000, 0x4, &(0x7f0000005000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) (async, rerun: 64)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (rerun: 64)

00:33:01 executing program 0:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/143, 0x8f, 0x0, &(0x7f0000000180)=""/132, 0x84}, &(0x7f0000000280)=0x40) (async, rerun: 32)
r1 = msgget$private(0x0, 0x52)
r2 = gettid()
setpgid(r2, 0x0) (async)
r3 = gettid()
setpgid(r3, 0x0) (async)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x1, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0x20, 0x1}, 0x0, 0x0, 0x0, 0xe3e5, 0x1, 0x8, 0x3ff, 0x22, 0x0, 0x5, r2, r3})
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
sched_getparam(r3, &(0x7f0000000080)) (async, rerun: 32)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0)
timerfd_gettime(r4, &(0x7f00000002c0))

00:33:02 executing program 1:
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x29a4, 0x80000})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, &(0x7f0000000580)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000480)=""/196, 0xc4}, 0x1)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x2, 0x33b, 0x0)
mmap$dsp(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x3bd883b78cdc082, 0x1010, r0, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10)
select(0x40, &(0x7f00000000c0)={0x7, 0x6, 0x1, 0x100, 0x5f7, 0x20, 0x100, 0x4}, &(0x7f00000001c0)={0x4, 0x8, 0xf4cc, 0x5, 0x7f, 0x5, 0x200, 0xeac}, &(0x7f0000000200)={0x800, 0x0, 0x2, 0x4, 0x0, 0x3, 0x5276b41b, 0x3}, &(0x7f0000000240)={0x77359400})
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x29a4, 0x80000}) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
recvmsg$can_bcm(r2, &(0x7f0000000580)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000480)=""/196, 0xc4}, 0x1) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x2, 0x33b, 0x0) (async)
mmap$dsp(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x3bd883b78cdc082, 0x1010, r0, 0x0) (async)
getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) (async)
select(0x40, &(0x7f00000000c0)={0x7, 0x6, 0x1, 0x100, 0x5f7, 0x20, 0x100, 0x4}, &(0x7f00000001c0)={0x4, 0x8, 0xf4cc, 0x5, 0x7f, 0x5, 0x200, 0xeac}, &(0x7f0000000200)={0x800, 0x0, 0x2, 0x4, 0x0, 0x3, 0x5276b41b, 0x3}, &(0x7f0000000240)={0x77359400}) (async)

00:33:02 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
openat$cgroup_pressure(r0, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1404, 0x300, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40004) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:02 executing program 2:
mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async)
r0 = shmget(0x0, 0x4000, 0x4, &(0x7f0000005000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) (async)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

00:33:02 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:02 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040))
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "08f3260141152f7c", "ad202d2141247de414551fe624326ea087e6bfcd433b05feb4643951ce083d0d", "ad36d691", "5c48402d0871c1ea"}, 0x38)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:33:02 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x341080, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040))
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3f, 0x40)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, 0x28})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0))
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:02 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) (async, rerun: 32)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async, rerun: 32)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "08f3260141152f7c", "ad202d2141247de414551fe624326ea087e6bfcd433b05feb4643951ce083d0d", "ad36d691", "5c48402d0871c1ea"}, 0x38) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:33:02 executing program 2:
mremap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:02 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
openat$cgroup_pressure(r0, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1404, 0x300, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40004) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:02 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1403, 0x400, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x60}}, 0x40000c0)

00:33:02 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

00:33:02 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) (async)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "08f3260141152f7c", "ad202d2141247de414551fe624326ea087e6bfcd433b05feb4643951ce083d0d", "ad36d691", "5c48402d0871c1ea"}, 0x38)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:33:02 executing program 1:
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x29a4, 0x80000}) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, &(0x7f0000000580)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000480)=""/196, 0xc4}, 0x1) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x2, 0x33b, 0x0)
mmap$dsp(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x3bd883b78cdc082, 0x1010, r0, 0x0) (async)
getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10)
select(0x40, &(0x7f00000000c0)={0x7, 0x6, 0x1, 0x100, 0x5f7, 0x20, 0x100, 0x4}, &(0x7f00000001c0)={0x4, 0x8, 0xf4cc, 0x5, 0x7f, 0x5, 0x200, 0xeac}, &(0x7f0000000200)={0x800, 0x0, 0x2, 0x4, 0x0, 0x3, 0x5276b41b, 0x3}, &(0x7f0000000240)={0x77359400})

00:33:02 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1403, 0x400, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x60}}, 0x40000c0)

00:33:02 executing program 2:
mremap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)
mremap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) (async)

00:33:02 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x4)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x8800)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1})
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x3, 0x15a, &(0x7f0000000140)="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"})

00:33:02 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
pkey_mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0, 0xffffffffffffffff)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:02 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

00:33:02 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
pkey_mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0, 0xffffffffffffffff)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:02 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x4)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x8800)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1})
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x3, 0x15a, &(0x7f0000000140)="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"})
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x4) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x8800) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x3, 0x15a, &(0x7f0000000140)="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"}) (async)

00:33:02 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1403, 0x400, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x60}}, 0x40000c0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1403, 0x400, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x60}}, 0x40000c0) (async)

00:33:02 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)

00:33:02 executing program 2:
mremap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:02 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
pkey_mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0, 0xffffffffffffffff) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:03 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x12800)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r1, 0xc7065000)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0))
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000382000/0x3000)=nil})

00:33:03 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:03 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000006000/0x1000)=nil)
mmap$snddsp_control(&(0x7f0000006000/0x4000)=nil, 0x1000, 0x9, 0x10, 0xffffffffffffffff, 0x83000000)

00:33:03 executing program 3:
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, 0x3000})
shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)

00:33:03 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async, rerun: 32)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x4) (async, rerun: 32)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x8800)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1})
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x3, 0x15a, &(0x7f0000000140)="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"})

00:33:03 executing program 5:
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x2, 0x0, 0xab0a79bcf6298607)

00:33:03 executing program 5:
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x2, 0x0, 0xab0a79bcf6298607)

00:33:03 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000c00060000000000000000004b3052081bed559bca2df27091ae237bc0d1c97214b727f681de3754867fcf6e115e67b1b3ab395493075c357b25625879e1ab2380eb831346d22a7d2daa144b7ae1f647082812e6e5b846693017d7f39029594f4b09519dcd396e5c222319d5089da56ad90990d13737f4c65dcbabe7672cd217002901439cf148d473fbd3319ec74eac88fed4b66c1057cdc70d9f25095f000cbcd14f495ea6b11a81cf5d74074eaa53ffea45cafbeb12bbe21eaf4bd5b18940d9d44a3c75f16da3e3dba768aadaad1c7bb632333fdc8ee422820ec9e1dddb3a5ea8099591"], 0x20}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

00:33:03 executing program 3:
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, 0x3000})
shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
userfaultfd(0x800) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, 0x3000}) (async)
shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) (async)

00:33:03 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000006000/0x1000)=nil)
mmap$snddsp_control(&(0x7f0000006000/0x4000)=nil, 0x1000, 0x9, 0x10, 0xffffffffffffffff, 0x83000000)

00:33:03 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x12800) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r1, 0xc7065000) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0))
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000382000/0x3000)=nil})

00:33:03 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)

00:33:03 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1c, 0x6, 0x1cd, &(0x7f0000000000)="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"})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil})

00:33:03 executing program 5:
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x2, 0x0, 0xab0a79bcf6298607)
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x2, 0x0, 0xab0a79bcf6298607) (async)

00:33:03 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000006000/0x1000)=nil)
mmap$snddsp_control(&(0x7f0000006000/0x4000)=nil, 0x1000, 0x9, 0x10, 0xffffffffffffffff, 0x83000000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000006000/0x1000)=nil) (async)
mmap$snddsp_control(&(0x7f0000006000/0x4000)=nil, 0x1000, 0x9, 0x10, 0xffffffffffffffff, 0x83000000) (async)

00:33:03 executing program 3:
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, 0x3000})
shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
userfaultfd(0x800) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, 0x3000}) (async)
shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) (async)

00:33:03 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x2, 0x80000)

00:33:03 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1c, 0x6, 0x1cd, &(0x7f0000000000)="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"})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil})

00:33:03 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)

00:33:03 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x12800) (async, rerun: 64)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r1, 0xc7065000) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000382000/0x3000)=nil})

00:33:03 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x2)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000007000/0x4000)=nil)
remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1000000, 0x5, 0x20)

00:33:03 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x6ecad734)

00:33:03 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1c, 0x6, 0x1cd, &(0x7f0000000000)="a05bc9f86f263f16691c758845bad57585ef275910a81bdd86688ae7edf6610b273f34e343605dfcc56fe5b732811a5a2e0a65a624bdc0aa9c74ebe4bac6e669297254fe292a827013623386ee1c4df156ecc5d54c2ff2a701ce02b4d76e8221c8ac96a21cc97093bc968f4e1b96c0251bd2ad90eb8c92e5008c96bf327c3411ca1507cffcf87b583dfa53e9bd45135688ff1b0bd99821434c85f9e62fc373a7f29d6b29509ff882415e68acd0516bbd3f50eb683052f1daea3b1821ee0191856e6d622a3943f214392322c52c5a21403e97024e9ae901245ee93ca43cda4d19d66cf9fb9a4c106c5a3311027e5604acda4f8a1b7209dc678791eb185a0181ee256972c72e2f52d15bb1c50983fb24a52163ebd0e23a169a6e739593072f0eb1f8164f91e4a44c35ef92de78200a31a8d82dd4c12a64223131d41c52df54b6d08e37a661bf52b85825eb70069f7ba0600e408ddec6587a24f4692ae66f5a2fafd269ef49339b308492f18adb6717edc71566118e0ddfd66ed90edc8b78459f5b81cbd06550959aff10158d4b43b857287cc3e14963f4c99c73a015a84cc270dfd81f02d502ef884c1e2b885cd7849efb12542ebea47c062fbaffb58ce78e026d8060122bf64645376f1edc44d591c9a4676e62bc329273927a2af7ecaffc3e6cea028d81838cd0b1235698661635aa1e7ad00734089dc1d37c137da30217166e483778108091ad5c9323fbb7832ade126d2ce4bfa4150c2795c3285700e1fbd6329ff9949d8bc58c2cc9ac8cdd8c5c52397eb9e75f6a5e5891f67f38da73fdf6b5c418f975c97ca0b8c9216e929dbd194da2c0865d6d927735d6d98026039540bbd739fd05056fe3416af16fa144d0b49efac2fff14f78b7ec1cd878d1c9231507494954ef6adc9bddbec60e0c929fce66e771f522103f3774fcfa48122921809ad0c10b73e665dcfea72604c599b3c7cb9ef44e04f5968a1a21e05fca59a666a8a9f74b881510c3c5494ed022a7b41e402df1fdb8892c45c406dd0ec109a393ba6e3e5fb5adeab08dce13b532c252c66b060e6619a5cf1d361c3dc82a89dd9dbce5f957d3001f0232e4c04ef56dd455be349fa962716c9798ac45eab915af4c7fcf561e02962a464ab88855b12222396e35ed947d9eb02475696de9662ba532be327a54336fd7b98ca3f8fe8fde1fd84540df8b0252310331a4e27b6f138ce382bf6aeeb5af3fee28fbe05c7c4ba8b6a4a7a81b381ba0de56d6fdf99eb0f6c8cbed8ba7a43d846849cb95f9820371fb42db0b73b8119c0d70fa11a562c3622d050c483048db686523e4029ac3b28930c127af8864ee0a5946288e955ff4488630bbe728e93579297ba5fc4777b721bbcdba38042b5e83e9d2a2d5c615c20335ea1092419252883d5b515120c7183120579bb7a2537e4a5e50a3776077a3a22b"})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil})

00:33:03 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$TIOCNXCL(r0, 0x540d)

00:33:03 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x2, 0x80000)

00:33:03 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x2)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000007000/0x4000)=nil)
remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1000000, 0x5, 0x20)
syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000007000/0x4000)=nil) (async)
remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1000000, 0x5, 0x20) (async)

00:33:03 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1c, 0x6, 0x1cd, &(0x7f0000000000)="a05bc9f86f263f16691c758845bad57585ef275910a81bdd86688ae7edf6610b273f34e343605dfcc56fe5b732811a5a2e0a65a624bdc0aa9c74ebe4bac6e669297254fe292a827013623386ee1c4df156ecc5d54c2ff2a701ce02b4d76e8221c8ac96a21cc97093bc968f4e1b96c0251bd2ad90eb8c92e5008c96bf327c3411ca1507cffcf87b583dfa53e9bd45135688ff1b0bd99821434c85f9e62fc373a7f29d6b29509ff882415e68acd0516bbd3f50eb683052f1daea3b1821ee0191856e6d622a3943f214392322c52c5a21403e97024e9ae901245ee93ca43cda4d19d66cf9fb9a4c106c5a3311027e5604acda4f8a1b7209dc678791eb185a0181ee256972c72e2f52d15bb1c50983fb24a52163ebd0e23a169a6e739593072f0eb1f8164f91e4a44c35ef92de78200a31a8d82dd4c12a64223131d41c52df54b6d08e37a661bf52b85825eb70069f7ba0600e408ddec6587a24f4692ae66f5a2fafd269ef49339b308492f18adb6717edc71566118e0ddfd66ed90edc8b78459f5b81cbd06550959aff10158d4b43b857287cc3e14963f4c99c73a015a84cc270dfd81f02d502ef884c1e2b885cd7849efb12542ebea47c062fbaffb58ce78e026d8060122bf64645376f1edc44d591c9a4676e62bc329273927a2af7ecaffc3e6cea028d81838cd0b1235698661635aa1e7ad00734089dc1d37c137da30217166e483778108091ad5c9323fbb7832ade126d2ce4bfa4150c2795c3285700e1fbd6329ff9949d8bc58c2cc9ac8cdd8c5c52397eb9e75f6a5e5891f67f38da73fdf6b5c418f975c97ca0b8c9216e929dbd194da2c0865d6d927735d6d98026039540bbd739fd05056fe3416af16fa144d0b49efac2fff14f78b7ec1cd878d1c9231507494954ef6adc9bddbec60e0c929fce66e771f522103f3774fcfa48122921809ad0c10b73e665dcfea72604c599b3c7cb9ef44e04f5968a1a21e05fca59a666a8a9f74b881510c3c5494ed022a7b41e402df1fdb8892c45c406dd0ec109a393ba6e3e5fb5adeab08dce13b532c252c66b060e6619a5cf1d361c3dc82a89dd9dbce5f957d3001f0232e4c04ef56dd455be349fa962716c9798ac45eab915af4c7fcf561e02962a464ab88855b12222396e35ed947d9eb02475696de9662ba532be327a54336fd7b98ca3f8fe8fde1fd84540df8b0252310331a4e27b6f138ce382bf6aeeb5af3fee28fbe05c7c4ba8b6a4a7a81b381ba0de56d6fdf99eb0f6c8cbed8ba7a43d846849cb95f9820371fb42db0b73b8119c0d70fa11a562c3622d050c483048db686523e4029ac3b28930c127af8864ee0a5946288e955ff4488630bbe728e93579297ba5fc4777b721bbcdba38042b5e83e9d2a2d5c615c20335ea1092419252883d5b515120c7183120579bb7a2537e4a5e50a3776077a3a22b"})

00:33:03 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x6ecad734)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x6ecad734) (async)

00:33:03 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0xb8777000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:03 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x5, 0x3f, 0x8000, 0x9})

00:33:03 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x2, 0x80000)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x2, 0x80000) (async)

00:33:03 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x6ecad734)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x6ecad734) (async)

00:33:03 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async, rerun: 64)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000007000/0x4000)=nil) (rerun: 64)
remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1000000, 0x5, 0x20)

00:33:03 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)

00:33:03 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0xb8777000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:03 executing program 2:
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)

00:33:03 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500))

00:33:03 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x400000d, 0x13, r0, 0xa000)

00:33:03 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x5, 0x3f, 0x8000, 0x9})

00:33:03 executing program 3:
socket(0x1f, 0x4, 0x0)
socket(0xc, 0x6, 0xc433)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0xfd21)

00:33:03 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0xb8777000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0xb8777000) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)

00:33:03 executing program 2:
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)

00:33:03 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f00000004c0))

00:33:03 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x400000d, 0x13, r0, 0xa000)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0x101, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x400000d, 0x13, r0, 0xa000) (async)

00:33:04 executing program 2:
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)

00:33:04 executing program 1:
mprotect(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x1000000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x8000000000001, 0x0, 0x0)
mmap$binder(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7)
mmap(&(0x7f000037f000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7e46a000)

00:33:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x5, 0x3f, 0x8000, 0x9})

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000004c0))

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000006000/0x3000)=nil)

00:33:04 executing program 1:
mprotect(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x1000000) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x8000000000001, 0x0, 0x0) (async)
mmap$binder(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7)
mmap(&(0x7f000037f000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7e46a000)

00:33:04 executing program 3:
socket(0x1f, 0x4, 0x0)
socket(0xc, 0x6, 0xc433) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0xfd21)

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000004c0))

00:33:04 executing program 1:
mprotect(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x1000000) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x8000000000001, 0x0, 0x0) (async)
mmap$binder(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7) (async)
mmap(&(0x7f000037f000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7e46a000)

00:33:04 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x1, 0x101, 0x0) (async, rerun: 64)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x400000d, 0x13, r0, 0xa000)

00:33:04 executing program 3:
socket(0x1f, 0x4, 0x0)
socket(0xc, 0x6, 0xc433) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0xfd21)

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000004c0))

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000006000/0x3000)=nil)

00:33:04 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040))
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x674200, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$TIOCSIG(r1, 0x40045436, 0x17)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x2, 0x68d, {r2, r3/1000+10000}, {r4, r5/1000+10000}, {0x2, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x3, 0x6, 0x0, 0x0, "7c6813a25a857a2a"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x321b00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0)

00:33:04 executing program 3:
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c60000001214aa7e2cbd7000fcdbdf25080001000066d6e40000010000000000"], 0x20}}, 0x8001)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:04 executing program 1:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080))
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:04 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040))
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x674200, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$TIOCSIG(r1, 0x40045436, 0x17)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x2, 0x68d, {r2, r3/1000+10000}, {r4, r5/1000+10000}, {0x2, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x3, 0x6, 0x0, 0x0, "7c6813a25a857a2a"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x321b00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) (async)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x674200, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$TIOCSIG(r1, 0x40045436, 0x17) (async)
clock_gettime(0x0, &(0x7f0000000140)) (async)
clock_gettime(0x0, &(0x7f0000000180)) (async)
sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x2, 0x68d, {r2, r3/1000+10000}, {r4, r5/1000+10000}, {0x2, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x3, 0x6, 0x0, 0x0, "7c6813a25a857a2a"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x321b00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) (async)

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000006000/0x3000)=nil)

00:33:04 executing program 1:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x2) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080))
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:04 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2240, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x20, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x446000)
bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @long={0x3, 0x2}}, 0x14)
ioctl$TIOCSIG(r1, 0x40045436, 0x1e)

00:33:04 executing program 4:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f00000004c0))

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x400000)=nil, 0x400000})
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00001df000/0x3000)=nil, 0x3000}, 0x3})

00:33:04 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2240, 0x0) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x20, 0x101, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), 0x4)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x446000) (async)
bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @long={0x3, 0x2}}, 0x14) (async)
ioctl$TIOCSIG(r1, 0x40045436, 0x1e)

00:33:04 executing program 1:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x2) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080))
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:04 executing program 4:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f00000004c0))

00:33:04 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x674200, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$TIOCSIG(r1, 0x40045436, 0x17) (async)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0}) (async)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x2, 0x68d, {r2, r3/1000+10000}, {r4, r5/1000+10000}, {0x2, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x3, 0x6, 0x0, 0x0, "7c6813a25a857a2a"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x321b00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0)

00:33:04 executing program 3:
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c60000001214aa7e2cbd7000fcdbdf25080001000066d6e40000010000000000"], 0x20}}, 0x8001)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c60000001214aa7e2cbd7000fcdbdf25080001000066d6e40000010000000000"], 0x20}}, 0x8001) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x400000)=nil, 0x400000}) (async)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00001df000/0x3000)=nil, 0x3000}, 0x3})

00:33:04 executing program 4:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f00000004c0))

00:33:04 executing program 1:
syz_open_dev$tty20(0xc, 0x4, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x6, 0x81, 0x2)

00:33:04 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2240, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x20, 0x101, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), 0x4) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x446000) (async)
bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @long={0x3, 0x2}}, 0x14) (async)
ioctl$TIOCSIG(r1, 0x40045436, 0x1e)

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x400000)=nil, 0x400000}) (async)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00001df000/0x3000)=nil, 0x3000}, 0x3})

00:33:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x2, 0x6}, @sack_perm, @mss={0x2, 0xfffffffc}, @timestamp, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x8)

00:33:04 executing program 3:
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c60000001214aa7e2cbd7000fcdbdf25080001000066d6e40000010000000000"], 0x20}}, 0x8001) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:04 executing program 1:
syz_open_dev$tty20(0xc, 0x4, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x6, 0x81, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x6, 0x81, 0x2) (async)

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000004c0))

00:33:04 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x7}, @sack_perm, @mss, @timestamp], 0x5)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
userfaultfd(0x0)

00:33:04 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000})
mbind(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x7, 0x1, 0x0)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
timerfd_create(0x3, 0x81800)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x20, 0x200000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2})

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x4000)=nil, 0x4000})

00:33:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) (async)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCNXCL(r1, 0x540d) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x2, 0x6}, @sack_perm, @mss={0x2, 0xfffffffc}, @timestamp, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x8)

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000004c0))

00:33:04 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x7}, @sack_perm, @mss, @timestamp], 0x5)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
userfaultfd(0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x7}, @sack_perm, @mss, @timestamp], 0x5) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
userfaultfd(0x0) (async)

00:33:04 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000})
mbind(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x7, 0x1, 0x0)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
timerfd_create(0x3, 0x81800)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x20, 0x200000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async)
mbind(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x7, 0x1, 0x0) (async)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
timerfd_create(0x3, 0x81800) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x20, 0x200000) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) (async)

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x4000)=nil, 0x4000})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x4000)=nil, 0x4000}) (async)

00:33:04 executing program 1:
syz_open_dev$tty20(0xc, 0x4, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x6, 0x81, 0x2)

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000004c0))

00:33:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x2, 0x6}, @sack_perm, @mss={0x2, 0xfffffffc}, @timestamp, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x8)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$TIOCNXCL(r1, 0x540d) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x2, 0x6}, @sack_perm, @mss={0x2, 0xfffffffc}, @timestamp, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x8) (async)

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x4000)=nil, 0x4000})

00:33:04 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x7}, @sack_perm, @mss, @timestamp], 0x5) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
userfaultfd(0x0)

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r0, 0x541b, 0x0)

00:33:04 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2e24c0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0xffff, 0x5})

00:33:04 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async)
mbind(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x7, 0x1, 0x0) (async)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
timerfd_create(0x3, 0x81800)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x20, 0x200000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2})

00:33:04 executing program 2:
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil)

00:33:04 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={r1})

00:33:04 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:04 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2e24c0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0xffff, 0x5})

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r0, 0x541b, 0x0)

00:33:04 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x404001)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:04 executing program 2:
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil)
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) (async)

00:33:04 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={r1})

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r0, 0x541b, 0x0)

00:33:04 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:04 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2e24c0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0xffff, 0x5})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2e24c0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0xffff, 0x5}) (async)

00:33:04 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x404001) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:04 executing program 2:
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil)

00:33:04 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:04 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={r1})

00:33:04 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
openat$cgroup_devices(r1, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000381000/0x2000)=nil, 0x2000}})

00:33:04 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x5, 0x3f, 0x8000, 0x9})

00:33:04 executing program 3:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x4000010, r0, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000006000/0x1000)=nil, 0x1000)

00:33:04 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x404001) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:04 executing program 2:
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000000000/0x4000)=nil)
pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000006, 0xffffffffffffffff)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x300000e, 0x810, r0, 0xb35b000)

00:33:04 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0xb8777000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:04 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
openat$cgroup_devices(r1, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000381000/0x2000)=nil, 0x2000}})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) (async)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
openat$cgroup_devices(r1, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000381000/0x2000)=nil, 0x2000}}) (async)

00:33:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:33:04 executing program 3:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x4000010, r0, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000006000/0x1000)=nil, 0x1000)

00:33:04 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000222000/0x4000)=nil, 0x4000}})

00:33:04 executing program 2:
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000000000/0x4000)=nil) (async)
pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000006, 0xffffffffffffffff)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x300000e, 0x810, r0, 0xb35b000)

00:33:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:33:04 executing program 3:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x4000010, r0, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000006000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x4000010, r0, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000006000/0x1000)=nil, 0x1000) (async)

00:33:04 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0xb8777000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:04 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000222000/0x4000)=nil, 0x4000}})

00:33:04 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) (async, rerun: 32)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32)
openat$cgroup_devices(r1, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000381000/0x2000)=nil, 0x2000}})

00:33:04 executing program 2:
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000000000/0x4000)=nil)
pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000006, 0xffffffffffffffff) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x300000e, 0x810, r0, 0xb35b000)

00:33:04 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0xb8777000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:04 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x100)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1})
r2 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x20, 0x3f, {0x0, 0x2710}, {0x4, 0x0, 0x4, 0xfe, 0x5, 0x9e, "1589b813"}, 0x0, 0x4, {}, 0xffffffff, 0x0, r3})
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x8c001, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000001c0)={0x1, 0xb, 0x4, 0x10000, 0x5, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x2, 0x1f, 0x20, "8dadef0f"}, 0x9, 0x4, {}, 0x8, 0x0, r4})
shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:33:04 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000222000/0x4000)=nil, 0x4000}})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000222000/0x4000)=nil, 0x4000}}) (async)

00:33:04 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040), 0x81, 0x0)
mprotect(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x0)

00:33:04 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
shmat(0x0, &(0x7f0000008000/0x2000)=nil, 0x6000)

00:33:05 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0xb8777000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x20, 0x401)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3, 0x4, 0x80})

00:33:05 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x100)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1})
r2 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x20, 0x3f, {0x0, 0x2710}, {0x4, 0x0, 0x4, 0xfe, 0x5, 0x9e, "1589b813"}, 0x0, 0x4, {}, 0xffffffff, 0x0, r3})
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x8c001, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000001c0)={0x1, 0xb, 0x4, 0x10000, 0x5, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x2, 0x1f, 0x20, "8dadef0f"}, 0x9, 0x4, {}, 0x8, 0x0, r4})
shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x100) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1}) (async)
shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) (async)
shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x20, 0x3f, {0x0, 0x2710}, {0x4, 0x0, 0x4, 0xfe, 0x5, 0x9e, "1589b813"}, 0x0, 0x4, {}, 0xffffffff, 0x0, r3}) (async)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x8c001, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000001c0)={0x1, 0xb, 0x4, 0x10000, 0x5, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x2, 0x1f, 0x20, "8dadef0f"}, 0x9, 0x4, {}, 0x8, 0x0, r4}) (async)
shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040), 0x81, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x0) (rerun: 64)

00:33:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="ca28b06cf4c60f9153ac9ec1ecb3fc901951258cfe4cf5c6140a0a7f4ce3a238bc299ab4f79e4ddf4564dc1d285174cb7cd616136a2b708a593e80be59e927a1cef39270af7bdb45719271e9513ce96b9c88782525899e9bd19e27e2d6bc91226b5a287a9655e5712e4cc7acebb415dfb699e478d706a9fbb7974f549abc0ad8fea006dc1f7ecdc1622911dcbd17", &(0x7f00000000c0)=@tcp=r1}, 0x20)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x50, r0, 0x1bcb000)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:05 executing program 4:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
shmat(0x0, &(0x7f0000008000/0x2000)=nil, 0x6000)

00:33:05 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x20, 0x401)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3, 0x4, 0x80})

00:33:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="ca28b06cf4c60f9153ac9ec1ecb3fc901951258cfe4cf5c6140a0a7f4ce3a238bc299ab4f79e4ddf4564dc1d285174cb7cd616136a2b708a593e80be59e927a1cef39270af7bdb45719271e9513ce96b9c88782525899e9bd19e27e2d6bc91226b5a287a9655e5712e4cc7acebb415dfb699e478d706a9fbb7974f549abc0ad8fea006dc1f7ecdc1622911dcbd17", &(0x7f00000000c0)=@tcp=r1}, 0x20) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x50, r0, 0x1bcb000) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:05 executing program 4:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040), 0x81, 0x0)
mprotect(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040), 0x81, 0x0) (async)
mprotect(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x0) (async)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
shmat(0x0, &(0x7f0000008000/0x2000)=nil, 0x6000)

00:33:05 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x100)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1})
r2 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x20, 0x3f, {0x0, 0x2710}, {0x4, 0x0, 0x4, 0xfe, 0x5, 0x9e, "1589b813"}, 0x0, 0x4, {}, 0xffffffff, 0x0, r3})
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x8c001, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000001c0)={0x1, 0xb, 0x4, 0x10000, 0x5, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x2, 0x1f, 0x20, "8dadef0f"}, 0x9, 0x4, {}, 0x8, 0x0, r4})
shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x100) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1}) (async)
shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) (async)
shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x20, 0x3f, {0x0, 0x2710}, {0x4, 0x0, 0x4, 0xfe, 0x5, 0x9e, "1589b813"}, 0x0, 0x4, {}, 0xffffffff, 0x0, r3}) (async)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x8c001, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000001c0)={0x1, 0xb, 0x4, 0x10000, 0x5, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x2, 0x1f, 0x20, "8dadef0f"}, 0x9, 0x4, {}, 0x8, 0x0, r4}) (async)
shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:05 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x20, 0x401)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3, 0x4, 0x80})

00:33:05 executing program 1:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0xcd, 0x8000000020000000, 0x0)

00:33:05 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$usbfs(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x2)

00:33:05 executing program 1:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0xcd, 0x8000000020000000, 0x0)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0xcd, 0x8000000020000000, 0x0) (async)

00:33:05 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000006000/0x3000)=nil, 0x3000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000008000/0x3000)=nil, 0x42, 0x3, 0x8})

00:33:05 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000ffa000/0x3000)=nil)

00:33:05 executing program 4:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="ca28b06cf4c60f9153ac9ec1ecb3fc901951258cfe4cf5c6140a0a7f4ce3a238bc299ab4f79e4ddf4564dc1d285174cb7cd616136a2b708a593e80be59e927a1cef39270af7bdb45719271e9513ce96b9c88782525899e9bd19e27e2d6bc91226b5a287a9655e5712e4cc7acebb415dfb699e478d706a9fbb7974f549abc0ad8fea006dc1f7ecdc1622911dcbd17", &(0x7f00000000c0)=@tcp=r1}, 0x20) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x50, r0, 0x1bcb000) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:05 executing program 1:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0xcd, 0x8000000020000000, 0x0)

00:33:05 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$usbfs(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x2)

00:33:05 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000006000/0x3000)=nil, 0x3000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000008000/0x3000)=nil, 0x42, 0x3, 0x8})

00:33:05 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000ffa000/0x3000)=nil)

00:33:05 executing program 4:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000006000/0x3000)=nil, 0x3000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000008000/0x3000)=nil, 0x42, 0x3, 0x8})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000006000/0x3000)=nil, 0x3000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000008000/0x3000)=nil, 0x42, 0x3, 0x8}) (async)

00:33:05 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:05 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$usbfs(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x2)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mprotect(&(0x7f0000383000/0x1000)=nil, 0x1000, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
pkey_mprotect(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000380000/0x4000)=nil, 0x4000}})
munlock(&(0x7f0000382000/0x2000)=nil, 0x2000)

00:33:05 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000ffa000/0x3000)=nil)

00:33:05 executing program 4:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
remap_file_pages(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x400, 0x80000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f0000005000/0x4000)=nil})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000002000/0x1000)=nil, 0x2, 0x1, 0x20})
r2 = shmget(0x3, 0x1000, 0x10, &(0x7f0000008000/0x1000)=nil)
shmat(r2, &(0x7f0000001000/0x2000)=nil, 0x1000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080))
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000009000/0x2000)=nil, 0x2000}, 0x2})
mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000005000/0x1000)=nil, 0x1000}, 0x2})

00:33:05 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0xa, &(0x7f0000ffd000/0x1000)=nil)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:05 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$TIOCCONS(r0, 0x541d) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mprotect(&(0x7f0000383000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 32)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
pkey_mprotect(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000380000/0x4000)=nil, 0x4000}}) (async)
munlock(&(0x7f0000382000/0x2000)=nil, 0x2000)

00:33:05 executing program 4:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 5:
r0 = getuid()
ioprio_get$uid(0x3, r0)
r1 = msgget$private(0x0, 0x260)
r2 = gettid()
setpgid(r2, 0x0)
r3 = gettid()
msgctl$IPC_SET(r1, 0x1, &(0x7f0000001600)={{0x1, r0, 0x0, r0, 0xee00, 0x8d, 0xffff}, 0x0, 0x0, 0x8, 0x6, 0x5, 0xfd, 0x733, 0x6, 0x2, 0x5, r2, r3})
getuid()
msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000dd6f6a3a232ec43039ed1e85d3fe12d47586f6905d15ee6a1e334e0d67b97ab910e65cd8a676984f6d5ddececfe9826fd0b80b348c218ff7d9ae6a6711388f994dba50a2c0431c4bcd5d37c4d53e622dd58c3ad0ac5860e94d0296a504a1fee9e0b0f57f0667adb0144628b62789ed43bf8980012f26774939d6426bb94ade0c80a9e4a45a8b91b5b70ec380c8ab1009445cc0dd9eb13e4eb3bd489dc8d309a4e9133d54d7fa2826df"], 0x47, 0x800)
r4 = getuid()
ioprio_get$uid(0x0, r4)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
remap_file_pages(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x400, 0x80000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f0000005000/0x4000)=nil}) (rerun: 64)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000002000/0x1000)=nil, 0x2, 0x1, 0x20}) (async)
r2 = shmget(0x3, 0x1000, 0x10, &(0x7f0000008000/0x1000)=nil)
shmat(r2, &(0x7f0000001000/0x2000)=nil, 0x1000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) (async, rerun: 64)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000009000/0x2000)=nil, 0x2000}, 0x2})
mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000005000/0x1000)=nil, 0x1000}, 0x2})

00:33:05 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0xa, &(0x7f0000ffd000/0x1000)=nil) (async)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:05 executing program 4:
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mprotect(&(0x7f0000383000/0x1000)=nil, 0x1000, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
pkey_mprotect(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000380000/0x4000)=nil, 0x4000}}) (async)
munlock(&(0x7f0000382000/0x2000)=nil, 0x2000)

00:33:05 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCCONS(r0, 0x541d) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:05 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0xa, &(0x7f0000ffd000/0x1000)=nil) (async)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) (async, rerun: 64)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (rerun: 64)

00:33:05 executing program 5:
r0 = getuid()
ioprio_get$uid(0x3, r0) (async, rerun: 64)
r1 = msgget$private(0x0, 0x260) (async, rerun: 64)
r2 = gettid()
setpgid(r2, 0x0) (async)
r3 = gettid()
msgctl$IPC_SET(r1, 0x1, &(0x7f0000001600)={{0x1, r0, 0x0, r0, 0xee00, 0x8d, 0xffff}, 0x0, 0x0, 0x8, 0x6, 0x5, 0xfd, 0x733, 0x6, 0x2, 0x5, r2, r3}) (async)
getuid() (async)
msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000dd6f6a3a232ec43039ed1e85d3fe12d47586f6905d15ee6a1e334e0d67b97ab910e65cd8a676984f6d5ddececfe9826fd0b80b348c218ff7d9ae6a6711388f994dba50a2c0431c4bcd5d37c4d53e622dd58c3ad0ac5860e94d0296a504a1fee9e0b0f57f0667adb0144628b62789ed43bf8980012f26774939d6426bb94ade0c80a9e4a45a8b91b5b70ec380c8ab1009445cc0dd9eb13e4eb3bd489dc8d309a4e9133d54d7fa2826df"], 0x47, 0x800) (async)
r4 = getuid()
ioprio_get$uid(0x0, r4) (async)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)

00:33:05 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
remap_file_pages(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x400, 0x80000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f0000005000/0x4000)=nil})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000002000/0x1000)=nil, 0x2, 0x1, 0x20})
r2 = shmget(0x3, 0x1000, 0x10, &(0x7f0000008000/0x1000)=nil)
shmat(r2, &(0x7f0000001000/0x2000)=nil, 0x1000) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) (async)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000009000/0x2000)=nil, 0x2000}, 0x2})
mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7) (async)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000005000/0x1000)=nil, 0x1000}, 0x2})

00:33:05 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x7f, 0x0)
mprotect(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x9)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000380000/0x1000)=nil)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000382000/0x2000)=nil, 0x7f, 0x1, 0x71})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})

00:33:05 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:05 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0xb, &(0x7f0000000000/0x2000)=nil)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x59, 0x402040)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x8000000000000000)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)={<r4=>0x0})
mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0xe38be000)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r4, 0x1, 0x2})

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0xb, &(0x7f0000000000/0x2000)=nil)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x59, 0x402040)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x8000000000000000) (async, rerun: 64)
r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async, rerun: 64)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)={<r4=>0x0})
mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0xe38be000) (async, rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r4, 0x1, 0x2}) (rerun: 32)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x7f, 0x0)
mprotect(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x9) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000380000/0x1000)=nil)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000382000/0x2000)=nil, 0x7f, 0x1, 0x71})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})

00:33:05 executing program 5:
r0 = getuid()
ioprio_get$uid(0x3, r0)
r1 = msgget$private(0x0, 0x260) (async, rerun: 64)
r2 = gettid() (rerun: 64)
setpgid(r2, 0x0) (async, rerun: 32)
r3 = gettid() (rerun: 32)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000001600)={{0x1, r0, 0x0, r0, 0xee00, 0x8d, 0xffff}, 0x0, 0x0, 0x8, 0x6, 0x5, 0xfd, 0x733, 0x6, 0x2, 0x5, r2, r3}) (async)
getuid() (async, rerun: 32)
msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000dd6f6a3a232ec43039ed1e85d3fe12d47586f6905d15ee6a1e334e0d67b97ab910e65cd8a676984f6d5ddececfe9826fd0b80b348c218ff7d9ae6a6711388f994dba50a2c0431c4bcd5d37c4d53e622dd58c3ad0ac5860e94d0296a504a1fee9e0b0f57f0667adb0144628b62789ed43bf8980012f26774939d6426bb94ade0c80a9e4a45a8b91b5b70ec380c8ab1009445cc0dd9eb13e4eb3bd489dc8d309a4e9133d54d7fa2826df"], 0x47, 0x800) (async, rerun: 32)
r4 = getuid()
ioprio_get$uid(0x0, r4) (async)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)

00:33:05 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:05 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x7f, 0x0)
mprotect(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x9) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000380000/0x1000)=nil) (async, rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000382000/0x2000)=nil, 0x7f, 0x1, 0x71})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})

00:33:05 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async, rerun: 32)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (rerun: 32)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000, 0xb, &(0x7f0000000000/0x2000)=nil) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x59, 0x402040)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x8000000000000000) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)={<r4=>0x0})
mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0xe38be000) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r4, 0x1, 0x2})

00:33:05 executing program 5:
mbind(&(0x7f0000223000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x200, 0xfd, 0x0)

00:33:05 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 3:
mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil)
mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000080)=0xb076, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$usbfs(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x100000e, 0x1010, r0, 0x7fffffffffffffff)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x244000)
mmap$usbfs(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4, 0x80010, r1, 0x3)

00:33:05 executing program 5:
mbind(&(0x7f0000223000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x200, 0xfd, 0x0)
mbind(&(0x7f0000223000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x200, 0xfd, 0x0) (async)

00:33:05 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080))
ioctl$TIOCCONS(r0, 0x541d)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r2 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x220843, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
ioctl$TIOCSIG(r3, 0x40045436, 0x3d)

00:33:05 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x8c20481c28adf79)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080))
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000000000/0x1000)=nil})

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000), 0x84, 0x0)

00:33:05 executing program 3:
mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil)
mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000080)=0xb076, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$usbfs(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x100000e, 0x1010, r0, 0x7fffffffffffffff)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x244000)
mmap$usbfs(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4, 0x80010, r1, 0x3)
mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) (async)
mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000080)=0xb076, 0x3, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$usbfs(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x100000e, 0x1010, r0, 0x7fffffffffffffff) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x244000) (async)
mmap$usbfs(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4, 0x80010, r1, 0x3) (async)

00:33:05 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080)) (async)
ioctl$TIOCCONS(r0, 0x541d) (async)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32)
r2 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (rerun: 32)
openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x220843, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64)
ioctl$TIOCSIG(r3, 0x40045436, 0x3d) (rerun: 64)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x8c20481c28adf79) (async)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000000000/0x1000)=nil})

00:33:05 executing program 5:
mbind(&(0x7f0000223000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x200, 0xfd, 0x0)

00:33:05 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000), 0x84, 0x0)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async, rerun: 32)
syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x8c20481c28adf79) (async, rerun: 32)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000000000/0x1000)=nil})

00:33:05 executing program 5:
msgsnd(0x0, &(0x7f00000001c0)={0x0, "d4f6cbb7a1d08a460f4613b703715db044c8278a9879d4762259974cfbe4131667ba5d172dc17accf5ee00f2466b56b493cad59a589712f7740a925eef11d38644f3f3d4481812b5486cb5ea39130d4578df590927c56516f8bf9b75de87a1cc3705c1d3f67bf1f55d3186f84d0c9ee936a1d3f7437bbaafd944abe046eabd0bbc9d4316d72e84555cb810d927654e9ce0be74be183fe5eb6508f3514aed47e776709d7bc6b9c3"}, 0xaf, 0x800)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x6, 0x4, 0x38, 0x9de})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)="8b8d72f9fcae42db919dff1646007f9313fe5d8befda29df7d9b92f5c3b3b080ba6ed987712e26dd2264dd26fe01fce32c4cbd4425d5", &(0x7f00000000c0)=@tcp6, 0x4}, 0x20)
getitimer(0x0, &(0x7f0000000180))
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:05 executing program 4:
socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 3:
mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil)
mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000080)=0xb076, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$usbfs(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x100000e, 0x1010, r0, 0x7fffffffffffffff)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x244000)
mmap$usbfs(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4, 0x80010, r1, 0x3)
mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) (async)
mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000080)=0xb076, 0x3, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$usbfs(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x100000e, 0x1010, r0, 0x7fffffffffffffff) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x244000) (async)
mmap$usbfs(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4, 0x80010, r1, 0x3) (async)

00:33:05 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080))
ioctl$TIOCCONS(r0, 0x541d)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r2 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x220843, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
ioctl$TIOCSIG(r3, 0x40045436, 0x3d)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080)) (async)
ioctl$TIOCCONS(r0, 0x541d) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async)
openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x220843, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$TIOCNXCL(r1, 0x540d) (async)
ioctl$TIOCSIG(r3, 0x40045436, 0x3d) (async)

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000), 0x84, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000), 0x84, 0x0) (async)

00:33:05 executing program 4:
socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 5:
msgsnd(0x0, &(0x7f00000001c0)={0x0, "d4f6cbb7a1d08a460f4613b703715db044c8278a9879d4762259974cfbe4131667ba5d172dc17accf5ee00f2466b56b493cad59a589712f7740a925eef11d38644f3f3d4481812b5486cb5ea39130d4578df590927c56516f8bf9b75de87a1cc3705c1d3f67bf1f55d3186f84d0c9ee936a1d3f7437bbaafd944abe046eabd0bbc9d4316d72e84555cb810d927654e9ce0be74be183fe5eb6508f3514aed47e776709d7bc6b9c3"}, 0xaf, 0x800)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x6, 0x4, 0x38, 0x9de})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)="8b8d72f9fcae42db919dff1646007f9313fe5d8befda29df7d9b92f5c3b3b080ba6ed987712e26dd2264dd26fe01fce32c4cbd4425d5", &(0x7f00000000c0)=@tcp6, 0x4}, 0x20)
getitimer(0x0, &(0x7f0000000180))
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
msgsnd(0x0, &(0x7f00000001c0)={0x0, "d4f6cbb7a1d08a460f4613b703715db044c8278a9879d4762259974cfbe4131667ba5d172dc17accf5ee00f2466b56b493cad59a589712f7740a925eef11d38644f3f3d4481812b5486cb5ea39130d4578df590927c56516f8bf9b75de87a1cc3705c1d3f67bf1f55d3186f84d0c9ee936a1d3f7437bbaafd944abe046eabd0bbc9d4316d72e84555cb810d927654e9ce0be74be183fe5eb6508f3514aed47e776709d7bc6b9c3"}, 0xaf, 0x800) (async)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) (async)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x6, 0x4, 0x38, 0x9de}) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)="8b8d72f9fcae42db919dff1646007f9313fe5d8befda29df7d9b92f5c3b3b080ba6ed987712e26dd2264dd26fe01fce32c4cbd4425d5", &(0x7f00000000c0)=@tcp6, 0x4}, 0x20) (async)
getitimer(0x0, &(0x7f0000000180)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)

00:33:05 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000008000/0x1000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000007000/0x4000)=nil, 0x4000, &(0x7f0000000000)='*-\'%-\x00')
r0 = socket(0xb, 0x7, 0x2)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000009000/0x2000)=nil, 0x666, 0x4, 0xd4})

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r0=>0x0)
setpgid(r0, 0x0)

00:33:05 executing program 4:
socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:05 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000007000/0x3000)=nil, 0x3000})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x8000}, @mss={0x2, 0x3}, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x5}], 0x6)
mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2, 0x8010, r1, 0x83000000)

00:33:05 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$VT_WAITACTIVE(r1, 0x5607)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x6, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))

00:33:05 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r0=>0x0)
setpgid(r0, 0x0)

00:33:05 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:06 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000007000/0x3000)=nil, 0x3000})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x8000}, @mss={0x2, 0x3}, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x5}], 0x6)
mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2, 0x8010, r1, 0x83000000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000007000/0x3000)=nil, 0x3000}) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x8000}, @mss={0x2, 0x3}, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x5}], 0x6) (async)
mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2, 0x8010, r1, 0x83000000) (async)

00:33:06 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000008000/0x1000)=nil) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000007000/0x4000)=nil, 0x4000, &(0x7f0000000000)='*-\'%-\x00') (async)
r0 = socket(0xb, 0x7, 0x2)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000009000/0x2000)=nil, 0x666, 0x4, 0xd4})

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$VT_WAITACTIVE(r1, 0x5607) (async)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x6, 0x4) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))

00:33:06 executing program 5:
msgsnd(0x0, &(0x7f00000001c0)={0x0, "d4f6cbb7a1d08a460f4613b703715db044c8278a9879d4762259974cfbe4131667ba5d172dc17accf5ee00f2466b56b493cad59a589712f7740a925eef11d38644f3f3d4481812b5486cb5ea39130d4578df590927c56516f8bf9b75de87a1cc3705c1d3f67bf1f55d3186f84d0c9ee936a1d3f7437bbaafd944abe046eabd0bbc9d4316d72e84555cb810d927654e9ce0be74be183fe5eb6508f3514aed47e776709d7bc6b9c3"}, 0xaf, 0x800) (async)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x6, 0x4, 0x38, 0x9de})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)="8b8d72f9fcae42db919dff1646007f9313fe5d8befda29df7d9b92f5c3b3b080ba6ed987712e26dd2264dd26fe01fce32c4cbd4425d5", &(0x7f00000000c0)=@tcp6, 0x4}, 0x20)
getitimer(0x0, &(0x7f0000000180)) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:06 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x81, 0x0)

00:33:06 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r0=>0x0)
setpgid(r0, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) (async)
setpgid(r0, 0x0) (async)

00:33:06 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000008000/0x1000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000007000/0x4000)=nil, 0x4000, &(0x7f0000000000)='*-\'%-\x00') (async)
r0 = socket(0xb, 0x7, 0x2)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000009000/0x2000)=nil, 0x666, 0x4, 0xd4})

00:33:06 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000007000/0x3000)=nil, 0x3000}) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x8000}, @mss={0x2, 0x3}, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x5}], 0x6) (async)
mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2, 0x8010, r1, 0x83000000)

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$VT_WAITACTIVE(r1, 0x5607) (async)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x6, 0x4) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))

00:33:06 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0)

00:33:06 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x19)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0xd, 0x1, 0x80, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20)

00:33:06 executing program 2:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)

00:33:06 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x8001, 0x8, 0x1, 0x80})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080), 0x785a6225, 0x4)

00:33:06 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x19)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0xd, 0x1, 0x80, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x19) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0xd, 0x1, 0x80, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) (async)

00:33:06 executing program 4:
socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:06 executing program 2:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)

00:33:06 executing program 3:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x1f, 0x7, 0xfff, 0x81})
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:06 executing program 2:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async)

00:33:06 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x8001, 0x8, 0x1, 0x80})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080), 0x785a6225, 0x4)

00:33:06 executing program 3:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:06 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xb8777000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:06 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x19)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0xd, 0x1, 0x80, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20)

00:33:06 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1000000)

00:33:06 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x8c20481c28adf79)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080))
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000000000/0x1000)=nil})

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x1f, 0x7, 0xfff, 0x81})
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x1f, 0x7, 0xfff, 0x81}) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:06 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1000000)

00:33:06 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x8001, 0x8, 0x1, 0x80})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080), 0x785a6225, 0x4)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x8001, 0x8, 0x1, 0x80}) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080), 0x785a6225, 0x4) (async)

00:33:06 executing program 3:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:06 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0xa, &(0x7f0000ffd000/0x1000)=nil)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:06 executing program 5:
remap_file_pages(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x2000006, 0x1, 0x8000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1, 0x2010, 0xffffffffffffffff, 0x83000000)

00:33:06 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1000000)

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x1f, 0x7, 0xfff, 0x81}) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:06 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/203, 0xcb, 0x0, &(0x7f0000000140)=""/178, 0xb2}, &(0x7f0000000240)=0x40)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x264a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
mmap$fb(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r2, 0xf4000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/74, 0x4a, 0x0, &(0x7f0000000300)=""/246, 0xf6}, &(0x7f0000000440)=0x40)

00:33:06 executing program 3:
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x0, "f032778652"}, 0xd, 0x0)
mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000005000/0x3000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = getgid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001140)={{0x1, 0xee01, r0, 0x0, 0xee00, 0x44, 0x100}, 0x0, 0x0, 0x0, 0xbb7, 0x19f, 0x0, 0x4, 0x1b, 0x60d, 0x1})
mmap$snddsp_control(&(0x7f0000006000/0x4000)=nil, 0x1000, 0x100000a, 0x10, 0xffffffffffffffff, 0x83000000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000004000/0x1000)=nil, 0x1000})

00:33:06 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000500))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1c, 0x6, 0x1cd, &(0x7f0000000000)="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"})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil})

00:33:06 executing program 3:
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x0, "f032778652"}, 0xd, 0x0) (async)
mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000005000/0x3000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = getgid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001140)={{0x1, 0xee01, r0, 0x0, 0xee00, 0x44, 0x100}, 0x0, 0x0, 0x0, 0xbb7, 0x19f, 0x0, 0x4, 0x1b, 0x60d, 0x1}) (async)
mmap$snddsp_control(&(0x7f0000006000/0x4000)=nil, 0x1000, 0x100000a, 0x10, 0xffffffffffffffff, 0x83000000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000004000/0x1000)=nil, 0x1000})

00:33:06 executing program 5:
remap_file_pages(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x2000006, 0x1, 0x8000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1, 0x2010, 0xffffffffffffffff, 0x83000000)

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)

00:33:06 executing program 2:
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil)
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x11, 0xffffffffffffffff, 0x77000)

00:33:06 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/203, 0xcb, 0x0, &(0x7f0000000140)=""/178, 0xb2}, &(0x7f0000000240)=0x40)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x264a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
mmap$fb(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r2, 0xf4000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/74, 0x4a, 0x0, &(0x7f0000000300)=""/246, 0xf6}, &(0x7f0000000440)=0x40)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/203, 0xcb, 0x0, &(0x7f0000000140)=""/178, 0xb2}, &(0x7f0000000240)=0x40) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x264a00, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r2, 0xf4000) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/74, 0x4a, 0x0, &(0x7f0000000300)=""/246, 0xf6}, &(0x7f0000000440)=0x40) (async)

00:33:06 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:33:06 executing program 2:
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil)
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x11, 0xffffffffffffffff, 0x77000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) (async)
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x11, 0xffffffffffffffff, 0x77000) (async)

00:33:06 executing program 3:
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x0, "f032778652"}, 0xd, 0x0)
mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000005000/0x3000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = getgid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001140)={{0x1, 0xee01, r0, 0x0, 0xee00, 0x44, 0x100}, 0x0, 0x0, 0x0, 0xbb7, 0x19f, 0x0, 0x4, 0x1b, 0x60d, 0x1}) (async)
mmap$snddsp_control(&(0x7f0000006000/0x4000)=nil, 0x1000, 0x100000a, 0x10, 0xffffffffffffffff, 0x83000000) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000004000/0x1000)=nil, 0x1000})

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)

00:33:06 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:33:06 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/203, 0xcb, 0x0, &(0x7f0000000140)=""/178, 0xb2}, &(0x7f0000000240)=0x40)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x264a00, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
mmap$fb(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r2, 0xf4000) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/74, 0x4a, 0x0, &(0x7f0000000300)=""/246, 0xf6}, &(0x7f0000000440)=0x40)

00:33:06 executing program 5:
remap_file_pages(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x2000006, 0x1, 0x8000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1, 0x2010, 0xffffffffffffffff, 0x83000000)
remap_file_pages(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x2000006, 0x1, 0x8000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1, 0x2010, 0xffffffffffffffff, 0x83000000) (async)

00:33:06 executing program 2:
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil)
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x11, 0xffffffffffffffff, 0x77000)

00:33:06 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:33:06 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x80000001, 0x0)

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)

00:33:06 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000006000/0x3000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:06 executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000), 0x81, 0x0)
mremap(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000381000/0x2000)=nil)

00:33:06 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x4000010, r0, 0x51000)

00:33:06 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x80000001, 0x0)

00:33:06 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000006000/0x3000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:06 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)

00:33:06 executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000), 0x81, 0x0)
mremap(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000381000/0x2000)=nil)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000), 0x81, 0x0) (async)
mremap(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000381000/0x2000)=nil) (async)

00:33:06 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x4000010, r0, 0x51000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x4000010, r0, 0x51000) (async)

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))

00:33:06 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x80000001, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x80000001, 0x0) (async)

00:33:06 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000006000/0x3000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:06 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x4000010, r0, 0x51000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x4000010, r0, 0x51000) (async)

00:33:06 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)

00:33:06 executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000), 0x81, 0x0) (async)
mremap(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000381000/0x2000)=nil)

00:33:06 executing program 3:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000006000/0x2000)=nil})

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))

00:33:06 executing program 1:
mbind(&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$dsp(&(0x7f000037d000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
prctl$PR_PAC_RESET_KEYS(0x36, 0x8)

00:33:06 executing program 2:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0xdc, 0x0, 0xa, 0x4})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSIG(r0, 0x40045436, 0x13)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)

00:33:06 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000), 0x7, 0x0)

00:33:06 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))

00:33:06 executing program 3:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000006000/0x2000)=nil})
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000006000/0x2000)=nil}) (async)

00:33:06 executing program 1:
mbind(&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$dsp(&(0x7f000037d000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
prctl$PR_PAC_RESET_KEYS(0x36, 0x8)
mbind(&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mmap$dsp(&(0x7f000037d000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async)
prctl$PR_PAC_RESET_KEYS(0x36, 0x8) (async)

00:33:06 executing program 2:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0xdc, 0x0, 0xa, 0x4})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSIG(r0, 0x40045436, 0x13)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0xdc, 0x0, 0xa, 0x4}) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
ioctl$TIOCSIG(r0, 0x40045436, 0x13) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) (async)

00:33:06 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000), 0x7, 0x0)

00:33:06 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)

00:33:06 executing program 3:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000006000/0x2000)=nil}) (rerun: 32)

00:33:06 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000), 0x7, 0x0)

00:33:06 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)

00:33:06 executing program 1:
mbind(&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$dsp(&(0x7f000037d000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
prctl$PR_PAC_RESET_KEYS(0x36, 0x8)

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) (async)

00:33:06 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x0)

00:33:06 executing program 2:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0xdc, 0x0, 0xa, 0x4}) (async)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSIG(r0, 0x40045436, 0x13) (async, rerun: 64)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil) (async, rerun: 64)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)

00:33:06 executing program 3:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:06 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x20000000000000, 0x20000000407f, 0x7)
mremap(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000380000/0x3000)=nil)
remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x401, 0x80000)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000382000/0x3000)=nil, 0x3000})

00:33:06 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)

00:33:06 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)

00:33:06 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)

00:33:06 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$dsp(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x0)

00:33:06 executing program 3:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:06 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x20000000000000, 0x20000000407f, 0x7) (async, rerun: 32)
mremap(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000380000/0x3000)=nil) (async, rerun: 32)
remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x401, 0x80000) (async)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000382000/0x3000)=nil, 0x3000})

00:33:06 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 4:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)

00:33:07 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$dsp(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x0)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x20000000000000, 0x20000000407f, 0x7) (async)
mremap(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000380000/0x3000)=nil) (async)
remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x401, 0x80000) (async)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000382000/0x3000)=nil, 0x3000})

00:33:07 executing program 3:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:07 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 4:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x8001, 0x2)

00:33:07 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:07 executing program 3:
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001340)=ANY=[@ANYBLOB="380000000614000103000000fddbdf250800f956894787fe7a000100010000000800010002000000080001000000000008000100020000007b02fbd7ea304ef3b38954916fe111ba2c4d9ba7d7ea90206e6aa4360cdfbc7d"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000011c0), 0x30d080, 0x0)
mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x8, 0x4010, r0, 0x83000000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001300)="789eaa6b8a18ed5ae4e35248e9a69489", 0x10)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil})
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000001240)=0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/4096, 0x1000, 0x0, &(0x7f0000001080)=""/173, 0xad}, &(0x7f0000001180)=0x40)

00:33:07 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mremap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000222000/0x1000)=nil)

00:33:07 executing program 2:
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1406, 0x800, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:07 executing program 4:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x8001, 0x2)

00:33:07 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mremap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000222000/0x1000)=nil)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mremap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000222000/0x1000)=nil) (async)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 3:
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001340)=ANY=[@ANYBLOB="380000000614000103000000fddbdf250800f956894787fe7a000100010000000800010002000000080001000000000008000100020000007b02fbd7ea304ef3b38954916fe111ba2c4d9ba7d7ea90206e6aa4360cdfbc7d"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000011c0), 0x30d080, 0x0)
mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x8, 0x4010, r0, 0x83000000) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001300)="789eaa6b8a18ed5ae4e35248e9a69489", 0x10) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil}) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000001240)=0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/4096, 0x1000, 0x0, &(0x7f0000001080)=""/173, 0xad}, &(0x7f0000001180)=0x40)

00:33:07 executing program 2:
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1406, 0x800, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:07 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x8001, 0x2)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x8001, 0x2) (async)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 2:
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1406, 0x800, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/149, 0x95, 0x0, &(0x7f0000000140)=""/148, 0x94}, &(0x7f0000000240)=0x40)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x9, 0x0)
mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000004, 0x10, r1, 0x82000000)

00:33:07 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mremap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000222000/0x1000)=nil)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:07 executing program 3:
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001340)=ANY=[@ANYBLOB="380000000614000103000000fddbdf250800f956894787fe7a000100010000000800010002000000080001000000000008000100020000007b02fbd7ea304ef3b38954916fe111ba2c4d9ba7d7ea90206e6aa4360cdfbc7d"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000011c0), 0x30d080, 0x0)
mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x8, 0x4010, r0, 0x83000000) (async, rerun: 32)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001300)="789eaa6b8a18ed5ae4e35248e9a69489", 0x10) (async, rerun: 32)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil}) (async, rerun: 64)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000001240)=0x1) (async, rerun: 64)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/4096, 0x1000, 0x0, &(0x7f0000001080)=""/173, 0xad}, &(0x7f0000001180)=0x40) (rerun: 64)

00:33:07 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/149, 0x95, 0x0, &(0x7f0000000140)=""/148, 0x94}, &(0x7f0000000240)=0x40)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x9, 0x0)
mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000004, 0x10, r1, 0x82000000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/149, 0x95, 0x0, &(0x7f0000000140)=""/148, 0x94}, &(0x7f0000000240)=0x40) (async)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x9, 0x0) (async)
mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000004, 0x10, r1, 0x82000000) (async)

00:33:07 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$snddsp_control(&(0x7f0000221000/0x3000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x83000000)

00:33:07 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 4:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 4:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/149, 0x95, 0x0, &(0x7f0000000140)=""/148, 0x94}, &(0x7f0000000240)=0x40) (async)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x9, 0x0)
mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000004, 0x10, r1, 0x82000000)

00:33:07 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mmap$snddsp_control(&(0x7f0000221000/0x3000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x83000000)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/66, 0x42, 0x0, &(0x7f0000000080)=""/233, 0xe9}, &(0x7f00000001c0)=0x40)
pkey_mprotect(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:07 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

00:33:07 executing program 4:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mmap$snddsp_control(&(0x7f0000221000/0x3000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x83000000)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x88, 0x10)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x2, 0x50, r0, 0xab000)

00:33:07 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/66, 0x42, 0x0, &(0x7f0000000080)=""/233, 0xe9}, &(0x7f00000001c0)=0x40)
pkey_mprotect(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/66, 0x42, 0x0, &(0x7f0000000080)=""/233, 0xe9}, &(0x7f00000001c0)=0x40) (async)
pkey_mprotect(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 4:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 4:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x88, 0x10)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x2, 0x50, r0, 0xab000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x88, 0x10) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x2, 0x50, r0, 0xab000) (async)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/66, 0x42, 0x0, &(0x7f0000000080)=""/233, 0xe9}, &(0x7f00000001c0)=0x40)
pkey_mprotect(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/66, 0x42, 0x0, &(0x7f0000000080)=""/233, 0xe9}, &(0x7f00000001c0)=0x40) (async)
pkey_mprotect(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:07 executing program 2:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x904, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008080)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000b14000128bd7000fddbdf08003f90328e8b56f7000100010008003f000300000008003f00030000000800010000000000080001000100000008003f000500000008003f000400000008910d00030004000000080001000200000008000300040000004a2e3ef132c6400000009d46a56cc83ab337006dcf2530cee3cacaf68afcb86d0963dd954241112ee471f62484c08b8eaa28e3831978d01c282595616803d16d657a9083f26bee6faa3270163c0f2716292b1430f75bb4517c4302b14f5c617566bb6278c36e95ca9823f76051c286"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x404d040)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000540)}, 0x12001)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x6, 0x9, 0xe1f, 0x3, 0x1a, 0x7, 0x66a}, &(0x7f0000000200)={0x8, 0xfffffffffffffffc, 0x8a9f, 0x400, 0xffffffff, 0x400, 0x1000, 0x1}, &(0x7f00000003c0)={0x10001, 0xc, 0x5, 0x9, 0x8, 0x400, 0x2, 0x4}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0x8001]}, 0x8})
r1 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000009000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r1, &(0x7f0000001000/0x4000)=nil, 0x3000)
r2 = userfaultfd(0x800)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000002000/0x1000)=nil, 0x1000})
remap_file_pages(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10001, 0x10)

00:33:07 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x3f, 0xc6, 0x800, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfe000000, 0x0, 0x0, 0x0, 0xff}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffffff7a}]}, &(0x7f00000001c0)='GPL\x00', 0x10000, 0xfb, &(0x7f0000000200)=""/251, 0x40f00, 0x14, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1, 0xffffffbe}, 0x10, 0xffffffffffffffff}, 0x80)
openat$cgroup_int(r1, &(0x7f0000000400)='cgroup.clone_children\x00', 0x2, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd8d4, 0x2)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000221000/0x4000)=nil})

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 4:
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000))
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x88, 0x10) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$fb(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x2, 0x50, r0, 0xab000)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0xe, &(0x7f0000006000/0x4000)=nil)

00:33:07 executing program 2:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x904, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000b14000128bd7000fddbdf08003f90328e8b56f7000100010008003f000300000008003f00030000000800010000000000080001000100000008003f000500000008003f000400000008910d00030004000000080001000200000008000300040000004a2e3ef132c6400000009d46a56cc83ab337006dcf2530cee3cacaf68afcb86d0963dd954241112ee471f62484c08b8eaa28e3831978d01c282595616803d16d657a9083f26bee6faa3270163c0f2716292b1430f75bb4517c4302b14f5c617566bb6278c36e95ca9823f76051c286"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x404d040) (async)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000540)}, 0x12001) (async)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x6, 0x9, 0xe1f, 0x3, 0x1a, 0x7, 0x66a}, &(0x7f0000000200)={0x8, 0xfffffffffffffffc, 0x8a9f, 0x400, 0xffffffff, 0x400, 0x1000, 0x1}, &(0x7f00000003c0)={0x10001, 0xc, 0x5, 0x9, 0x8, 0x400, 0x2, 0x4}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0x8001]}, 0x8}) (async)
r1 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000009000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async)
shmat(r1, &(0x7f0000001000/0x4000)=nil, 0x3000) (async)
r2 = userfaultfd(0x800) (async)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000002000/0x1000)=nil, 0x1000}) (async)
remap_file_pages(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10001, 0x10)

00:33:07 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x3f, 0xc6, 0x800, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfe000000, 0x0, 0x0, 0x0, 0xff}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffffff7a}]}, &(0x7f00000001c0)='GPL\x00', 0x10000, 0xfb, &(0x7f0000000200)=""/251, 0x40f00, 0x14, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1, 0xffffffbe}, 0x10, 0xffffffffffffffff}, 0x80)
openat$cgroup_int(r1, &(0x7f0000000400)='cgroup.clone_children\x00', 0x2, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd8d4, 0x2)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000221000/0x4000)=nil})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x3f, 0xc6, 0x800, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfe000000, 0x0, 0x0, 0x0, 0xff}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffffff7a}]}, &(0x7f00000001c0)='GPL\x00', 0x10000, 0xfb, &(0x7f0000000200)=""/251, 0x40f00, 0x14, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1, 0xffffffbe}, 0x10, 0xffffffffffffffff}, 0x80) (async)
openat$cgroup_int(r1, &(0x7f0000000400)='cgroup.clone_children\x00', 0x2, 0x0) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000040), 0xd8d4, 0x2) (async)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000221000/0x4000)=nil}) (async)

00:33:07 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

00:33:07 executing program 1:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r0, 0x400000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x81, 0x0)
munlock(&(0x7f0000381000/0x1000)=nil, 0x1000)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0xe, &(0x7f0000006000/0x4000)=nil)

00:33:07 executing program 2:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x904, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008080)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000b14000128bd7000fddbdf08003f90328e8b56f7000100010008003f000300000008003f00030000000800010000000000080001000100000008003f000500000008003f000400000008910d00030004000000080001000200000008000300040000004a2e3ef132c6400000009d46a56cc83ab337006dcf2530cee3cacaf68afcb86d0963dd954241112ee471f62484c08b8eaa28e3831978d01c282595616803d16d657a9083f26bee6faa3270163c0f2716292b1430f75bb4517c4302b14f5c617566bb6278c36e95ca9823f76051c286"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x404d040)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000540)}, 0x12001)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x6, 0x9, 0xe1f, 0x3, 0x1a, 0x7, 0x66a}, &(0x7f0000000200)={0x8, 0xfffffffffffffffc, 0x8a9f, 0x400, 0xffffffff, 0x400, 0x1000, 0x1}, &(0x7f00000003c0)={0x10001, 0xc, 0x5, 0x9, 0x8, 0x400, 0x2, 0x4}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0x8001]}, 0x8})
r1 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000009000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r1, &(0x7f0000001000/0x4000)=nil, 0x3000)
r2 = userfaultfd(0x800)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000002000/0x1000)=nil, 0x1000})
remap_file_pages(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10001, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x904, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000b14000128bd7000fddbdf08003f90328e8b56f7000100010008003f000300000008003f00030000000800010000000000080001000100000008003f000500000008003f000400000008910d00030004000000080001000200000008000300040000004a2e3ef132c6400000009d46a56cc83ab337006dcf2530cee3cacaf68afcb86d0963dd954241112ee471f62484c08b8eaa28e3831978d01c282595616803d16d657a9083f26bee6faa3270163c0f2716292b1430f75bb4517c4302b14f5c617566bb6278c36e95ca9823f76051c286"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x404d040) (async)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000540)}, 0x12001) (async)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x6, 0x9, 0xe1f, 0x3, 0x1a, 0x7, 0x66a}, &(0x7f0000000200)={0x8, 0xfffffffffffffffc, 0x8a9f, 0x400, 0xffffffff, 0x400, 0x1000, 0x1}, &(0x7f00000003c0)={0x10001, 0xc, 0x5, 0x9, 0x8, 0x400, 0x2, 0x4}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0x8001]}, 0x8}) (async)
shmget(0x1, 0x2000, 0x78000000, &(0x7f0000009000/0x2000)=nil) (async)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async)
shmat(r1, &(0x7f0000001000/0x4000)=nil, 0x3000) (async)
userfaultfd(0x800) (async)
shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000) (async)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000002000/0x1000)=nil, 0x1000}) (async)
remap_file_pages(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10001, 0x10) (async)

00:33:07 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSIG(r1, 0x40045436, 0x2f)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))

00:33:07 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x3f, 0xc6, 0x800, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfe000000, 0x0, 0x0, 0x0, 0xff}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffffff7a}]}, &(0x7f00000001c0)='GPL\x00', 0x10000, 0xfb, &(0x7f0000000200)=""/251, 0x40f00, 0x14, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1, 0xffffffbe}, 0x10, 0xffffffffffffffff}, 0x80)
openat$cgroup_int(r1, &(0x7f0000000400)='cgroup.clone_children\x00', 0x2, 0x0) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd8d4, 0x2)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000221000/0x4000)=nil})

00:33:07 executing program 1:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r0, 0x400000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x81, 0x0)
munlock(&(0x7f0000381000/0x1000)=nil, 0x1000)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
syz_open_pts(r0, 0x400000) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x81, 0x0) (async)
munlock(&(0x7f0000381000/0x1000)=nil, 0x1000) (async)

00:33:07 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000101408002dbd7000ffdbdf2508004c0000000000439a2a076442a55909fc29a96613088b7d080ae37cba4eed967599efd73efc35636d7579c102000000888c879ef65ff3d26861bcc239b291e379f8cb04ae0551c85c39b1803635ef4da5aff6b3c4b04a3238eececb47490e87af0f694bd78c6cb71e4dfba3d350faf4a13417e270a0b4ba45c51c019250af6f6d714338daffde42f3d321d34e1b34424fb2b69ca39dbb857419656c256f33"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4020)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x5, 0x5, 0x7)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x20c000, 0x0)

00:33:07 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 64)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0xe, &(0x7f0000006000/0x4000)=nil) (rerun: 64)

00:33:07 executing program 1:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r0, 0x400000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x81, 0x0)
munlock(&(0x7f0000381000/0x1000)=nil, 0x1000)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
syz_open_pts(r0, 0x400000) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x81, 0x0) (async)
munlock(&(0x7f0000381000/0x1000)=nil, 0x1000) (async)

00:33:07 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3000006, 0x12, r0, 0x8072e000)
timerfd_create(0x7, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000007000/0x1000)=nil, 0x1000}, 0x2})
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "a3e9244137029674", "b954eb18100bd720bf9d63d5b7781e45", "ca5f64fe", "82c7c9ef0af6ccbd"}, 0x28)

00:33:07 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSIG(r1, 0x40045436, 0x2f) (async)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))

00:33:07 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000101408002dbd7000ffdbdf2508004c0000000000439a2a076442a55909fc29a96613088b7d080ae37cba4eed967599efd73efc35636d7579c102000000888c879ef65ff3d26861bcc239b291e379f8cb04ae0551c85c39b1803635ef4da5aff6b3c4b04a3238eececb47490e87af0f694bd78c6cb71e4dfba3d350faf4a13417e270a0b4ba45c51c019250af6f6d714338daffde42f3d321d34e1b34424fb2b69ca39dbb857419656c256f33"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4020)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x5, 0x5, 0x7) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x20c000, 0x0)

00:33:07 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x5)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa2d80, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x3, "8f013bebeebbbd47645d72c12043648c62b608ed04eace69621bdf69d92f46572beff9cdfd86428425e9f157a458c2a1f4dbb6d64503089b60d2983033e9208e8c0e7aa95e81bcc088e5d73f9ff325b3fbea405a375c1e86eb00217d6a57fa0845718338490de41de94ba70d5cf4ae43ef8c43edaccfaf471f66d85c14418934dac07705ba87148f2b04f33c608a0967f667c997843a865ebd8451cfaa7824574a5fc263732f836d612ce65e2d9a8c8eddbd8667c1e3db83ba846fadd474d0e673c9d7534cce8644bc69c0d04b25e97b4f1a86a42469a04aa0f42be81f14e691a7970ccf2d67fd20567c710b4b5d884e832793ef78db3a"}, 0xff, 0x800)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000001, 0x1010, r1, 0x29ef0000)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}})

00:33:07 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3000006, 0x12, r0, 0x8072e000)
timerfd_create(0x7, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000007000/0x1000)=nil, 0x1000}, 0x2}) (async)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "a3e9244137029674", "b954eb18100bd720bf9d63d5b7781e45", "ca5f64fe", "82c7c9ef0af6ccbd"}, 0x28)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x101, 0x0)

00:33:07 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSIG(r1, 0x40045436, 0x2f)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))

00:33:07 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x5) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa2d80, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil}) (async)
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x3, "8f013bebeebbbd47645d72c12043648c62b608ed04eace69621bdf69d92f46572beff9cdfd86428425e9f157a458c2a1f4dbb6d64503089b60d2983033e9208e8c0e7aa95e81bcc088e5d73f9ff325b3fbea405a375c1e86eb00217d6a57fa0845718338490de41de94ba70d5cf4ae43ef8c43edaccfaf471f66d85c14418934dac07705ba87148f2b04f33c608a0967f667c997843a865ebd8451cfaa7824574a5fc263732f836d612ce65e2d9a8c8eddbd8667c1e3db83ba846fadd474d0e673c9d7534cce8644bc69c0d04b25e97b4f1a86a42469a04aa0f42be81f14e691a7970ccf2d67fd20567c710b4b5d884e832793ef78db3a"}, 0xff, 0x800) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000001, 0x1010, r1, 0x29ef0000) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}})

00:33:07 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000101408002dbd7000ffdbdf2508004c0000000000439a2a076442a55909fc29a96613088b7d080ae37cba4eed967599efd73efc35636d7579c102000000888c879ef65ff3d26861bcc239b291e379f8cb04ae0551c85c39b1803635ef4da5aff6b3c4b04a3238eececb47490e87af0f694bd78c6cb71e4dfba3d350faf4a13417e270a0b4ba45c51c019250af6f6d714338daffde42f3d321d34e1b34424fb2b69ca39dbb857419656c256f33"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4020)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x5, 0x5, 0x7)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x20c000, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000101408002dbd7000ffdbdf2508004c0000000000439a2a076442a55909fc29a96613088b7d080ae37cba4eed967599efd73efc35636d7579c102000000888c879ef65ff3d26861bcc239b291e379f8cb04ae0551c85c39b1803635ef4da5aff6b3c4b04a3238eececb47490e87af0f694bd78c6cb71e4dfba3d350faf4a13417e270a0b4ba45c51c019250af6f6d714338daffde42f3d321d34e1b34424fb2b69ca39dbb857419656c256f33"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4020) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x5, 0x5, 0x7) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x20c000, 0x0) (async)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x101, 0x0)

00:33:07 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3000006, 0x12, r0, 0x8072e000)
timerfd_create(0x7, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000007000/0x1000)=nil, 0x1000}, 0x2})
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "a3e9244137029674", "b954eb18100bd720bf9d63d5b7781e45", "ca5f64fe", "82c7c9ef0af6ccbd"}, 0x28)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3000006, 0x12, r0, 0x8072e000) (async)
timerfd_create(0x7, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000007000/0x1000)=nil, 0x1000}, 0x2}) (async)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "a3e9244137029674", "b954eb18100bd720bf9d63d5b7781e45", "ca5f64fe", "82c7c9ef0af6ccbd"}, 0x28) (async)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x10000)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x5000)=nil, 0x1, 0x5})
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x5) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa2d80, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil}) (async)
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x3, "8f013bebeebbbd47645d72c12043648c62b608ed04eace69621bdf69d92f46572beff9cdfd86428425e9f157a458c2a1f4dbb6d64503089b60d2983033e9208e8c0e7aa95e81bcc088e5d73f9ff325b3fbea405a375c1e86eb00217d6a57fa0845718338490de41de94ba70d5cf4ae43ef8c43edaccfaf471f66d85c14418934dac07705ba87148f2b04f33c608a0967f667c997843a865ebd8451cfaa7824574a5fc263732f836d612ce65e2d9a8c8eddbd8667c1e3db83ba846fadd474d0e673c9d7534cce8644bc69c0d04b25e97b4f1a86a42469a04aa0f42be81f14e691a7970ccf2d67fd20567c710b4b5d884e832793ef78db3a"}, 0xff, 0x800) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000001, 0x1010, r1, 0x29ef0000) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}})

00:33:07 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x101, 0x0)

00:33:07 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000007000/0x3000)=nil, 0x9, 0x6, 0x82})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:07 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x10000)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x5000)=nil, 0x1, 0x5})
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x10000) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x5000)=nil, 0x1, 0x5}) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:07 executing program 5:
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000000314010026bd7000fddbdf250900020073797a3000000000080041007278650014003300000000000000000000000000000000000900020073797a3200000000ffff40007278650014003300626f6e645f736c6176655f31000000000900020073797a3100000000080041007369770014003300626f6e645f736c6176655f30000000000900020073797a3000862c55f600410072786500140033007465616d5f736c6136655f30000000000900020073797a320000000008004100727865001400330062726964676530000000000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x800)

00:33:07 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = userfaultfd(0x81801)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f000037f000/0x3000)=nil, 0x3000}})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000381000/0x1000)=nil, 0x1000})

00:33:07 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000008000/0x4000)=nil, 0x4000}, 0x1})
mbind(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xe, 0xcb, 0x1)
pkey_mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x3000001, 0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

00:33:07 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x10000)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x5000)=nil, 0x1, 0x5})
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000007000/0x3000)=nil, 0x9, 0x6, 0x82}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:08 executing program 5:
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000000314010026bd7000fddbdf250900020073797a3000000000080041007278650014003300000000000000000000000000000000000900020073797a3200000000ffff40007278650014003300626f6e645f736c6176655f31000000000900020073797a3100000000080041007369770014003300626f6e645f736c6176655f30000000000900020073797a3000862c55f600410072786500140033007465616d5f736c6136655f30000000000900020073797a320000000008004100727865001400330062726964676530000000000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000000314010026bd7000fddbdf250900020073797a3000000000080041007278650014003300000000000000000000000000000000000900020073797a3200000000ffff40007278650014003300626f6e645f736c6176655f31000000000900020073797a3100000000080041007369770014003300626f6e645f736c6176655f30000000000900020073797a3000862c55f600410072786500140033007465616d5f736c6136655f30000000000900020073797a320000000008004100727865001400330062726964676530000000000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = userfaultfd(0x81801)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f000037f000/0x3000)=nil, 0x3000}})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000381000/0x1000)=nil, 0x1000})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
userfaultfd(0x81801) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f000037f000/0x3000)=nil, 0x3000}}) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000381000/0x1000)=nil, 0x1000}) (async)

00:33:08 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000008000/0x4000)=nil, 0x4000}, 0x1}) (async)
mbind(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xe, 0xcb, 0x1)
pkey_mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x3000001, 0xffffffffffffffff) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

00:33:08 executing program 5:
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000000314010026bd7000fddbdf250900020073797a3000000000080041007278650014003300000000000000000000000000000000000900020073797a3200000000ffff40007278650014003300626f6e645f736c6176655f31000000000900020073797a3100000000080041007369770014003300626f6e645f736c6176655f30000000000900020073797a3000862c55f600410072786500140033007465616d5f736c6136655f30000000000900020073797a320000000008004100727865001400330062726964676530000000000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x800)

00:33:08 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000007000/0x3000)=nil, 0x9, 0x6, 0x82})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000007000/0x3000)=nil, 0x9, 0x6, 0x82}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:08 executing program 0:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x11, 0x1, 0xe5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x208400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x20000000000001f5, &(0x7f0000000080)=[{0x6, 0x3, 0x20, 0x2}, {0x8, 0x0, 0x0, 0xff}]})
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0))
ioctl$VT_WAITACTIVE(r1, 0x5607)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0)
openat$cgroup_int(r4, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)

00:33:08 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000008000/0x4000)=nil, 0x4000}, 0x1})
mbind(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xe, 0xcb, 0x1)
pkey_mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x3000001, 0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000008000/0x4000)=nil, 0x4000}, 0x1}) (async)
mbind(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xe, 0xcb, 0x1) (async)
pkey_mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x3000001, 0xffffffffffffffff) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = userfaultfd(0x81801)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f000037f000/0x3000)=nil, 0x3000}})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000381000/0x1000)=nil, 0x1000})
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
userfaultfd(0x81801) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f000037f000/0x3000)=nil, 0x3000}}) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000381000/0x1000)=nil, 0x1000}) (async)

00:33:08 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000))

00:33:08 executing program 3:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000005000/0x4000)=nil)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x3, 0x100000)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:08 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 0:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x11, 0x1, 0xe5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async, rerun: 64)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) (async)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x208400, 0x0) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x20000000000001f5, &(0x7f0000000080)=[{0x6, 0x3, 0x20, 0x2}, {0x8, 0x0, 0x0, 0xff}]})
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) (async)
ioctl$VT_WAITACTIVE(r1, 0x5607) (async)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0)
openat$cgroup_int(r4, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)

00:33:08 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0)
msgsnd(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000004baeb2ace7076668409fb42e8b9c108c17ef8079c4045d4df94c3743475640e589f14c58d6e5cc67120b32ac824d328ea98ce39ab81686f01be50d2f8531c2b9cfe51b990fbecc73df91e57cc638f15002f38ba873f24e00d10b5fbc54a4d757f2aa1c8427fb344f402d60"], 0x52, 0x800)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffffffd, 0x5, 0x2})

00:33:08 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x1402, 0x100, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x4010)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x3000)=nil, 0x3000}})

00:33:08 executing program 3:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000005000/0x4000)=nil)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x3, 0x100000)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000005000/0x4000)=nil) (async)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x3, 0x100000) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:08 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000))

00:33:08 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0)
msgsnd(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000004baeb2ace7076668409fb42e8b9c108c17ef8079c4045d4df94c3743475640e589f14c58d6e5cc67120b32ac824d328ea98ce39ab81686f01be50d2f8531c2b9cfe51b990fbecc73df91e57cc638f15002f38ba873f24e00d10b5fbc54a4d757f2aa1c8427fb344f402d60"], 0x52, 0x800)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffffffd, 0x5, 0x2})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) (async)
msgsnd(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000004baeb2ace7076668409fb42e8b9c108c17ef8079c4045d4df94c3743475640e589f14c58d6e5cc67120b32ac824d328ea98ce39ab81686f01be50d2f8531c2b9cfe51b990fbecc73df91e57cc638f15002f38ba873f24e00d10b5fbc54a4d757f2aa1c8427fb344f402d60"], 0x52, 0x800) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffffffd, 0x5, 0x2}) (async)

00:33:08 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x1402, 0x100, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x4010)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x3000)=nil, 0x3000}})

00:33:08 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 3:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000005000/0x4000)=nil) (async)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x3, 0x100000)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:08 executing program 0:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x11, 0x1, 0xe5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x208400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x20000000000001f5, &(0x7f0000000080)=[{0x6, 0x3, 0x20, 0x2}, {0x8, 0x0, 0x0, 0xff}]}) (async)
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0))
ioctl$VT_WAITACTIVE(r1, 0x5607) (async)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0)
openat$cgroup_int(r4, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)

00:33:08 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async)

00:33:08 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0)
msgsnd(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000004baeb2ace7076668409fb42e8b9c108c17ef8079c4045d4df94c3743475640e589f14c58d6e5cc67120b32ac824d328ea98ce39ab81686f01be50d2f8531c2b9cfe51b990fbecc73df91e57cc638f15002f38ba873f24e00d10b5fbc54a4d757f2aa1c8427fb344f402d60"], 0x52, 0x800)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffffffd, 0x5, 0x2})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) (async)
msgsnd(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000004baeb2ace7076668409fb42e8b9c108c17ef8079c4045d4df94c3743475640e589f14c58d6e5cc67120b32ac824d328ea98ce39ab81686f01be50d2f8531c2b9cfe51b990fbecc73df91e57cc638f15002f38ba873f24e00d10b5fbc54a4d757f2aa1c8427fb344f402d60"], 0x52, 0x800) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffffffd, 0x5, 0x2}) (async)

00:33:08 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x1402, 0x100, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x4010) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x3000)=nil, 0x3000}})

00:33:08 executing program 4:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
shmget(0x1, 0x4000, 0x10, &(0x7f0000007000/0x4000)=nil)
syz_open_dev$ttys(0xc, 0x2, 0x1)

00:33:08 executing program 5:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x1000000000002, 0xfffffffffffffffd, 0x1)

00:33:08 executing program 4:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x440040, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
remap_file_pages(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x0, 0x1f, 0x3)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "4ed2de0be52c1024", "9df8933cb9039708ea631cde8678a74556f05cc06db11591679ff7b9e8d60aab", "57176599", "b511176db404546a"}, 0x38)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x4, @loopback, 0x2}}, 0x0, 0x0, 0x40, 0x0, "704fb9041956b839740800e5161157ca24ec6d19d71b38ad406fbd89538ee2bfa4d2dcc14588dbdf8651d3bf0be882da26eb46127e40174b21d976fb189f0275553dfb70c136d2d7b30d830d32698747"}, 0xd8)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x2, 0x67, 0x0, 0x1}, {0x2, 0x15, 0x81, 0x4}, {0xff, 0x40, 0x8}, {0x2, 0x48, 0x4, 0x79a}, {0x94b, 0x81, 0x1, 0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000300)={r4, 0x40})
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x1406, 0x10, 0x781, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x1410, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, r0, 0x7fffffff)

00:33:08 executing program 5:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x1000000000002, 0xfffffffffffffffd, 0x1)

00:33:08 executing program 2:
munlock(&(0x7f0000001000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
shmget(0x1, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)

00:33:08 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x440040, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 64)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) (async, rerun: 64)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:08 executing program 4:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
remap_file_pages(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x0, 0x1f, 0x3)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "4ed2de0be52c1024", "9df8933cb9039708ea631cde8678a74556f05cc06db11591679ff7b9e8d60aab", "57176599", "b511176db404546a"}, 0x38)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x4, @loopback, 0x2}}, 0x0, 0x0, 0x40, 0x0, "704fb9041956b839740800e5161157ca24ec6d19d71b38ad406fbd89538ee2bfa4d2dcc14588dbdf8651d3bf0be882da26eb46127e40174b21d976fb189f0275553dfb70c136d2d7b30d830d32698747"}, 0xd8) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x2, 0x67, 0x0, 0x1}, {0x2, 0x15, 0x81, 0x4}, {0xff, 0x40, 0x8}, {0x2, 0x48, 0x4, 0x79a}, {0x94b, 0x81, 0x1, 0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000300)={r4, 0x40}) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x1406, 0x10, 0x781, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x1410, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, r0, 0x7fffffff)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
shmget(0x1, 0x4000, 0x10, &(0x7f0000007000/0x4000)=nil)
syz_open_dev$ttys(0xc, 0x2, 0x1)

00:33:08 executing program 4:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 2:
munlock(&(0x7f0000001000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
shmget(0x1, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
munlock(&(0x7f0000001000/0x4000)=nil, 0x4000) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
shmget(0x1, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) (async)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
remap_file_pages(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x0, 0x1f, 0x3)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "4ed2de0be52c1024", "9df8933cb9039708ea631cde8678a74556f05cc06db11591679ff7b9e8d60aab", "57176599", "b511176db404546a"}, 0x38)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x4, @loopback, 0x2}}, 0x0, 0x0, 0x40, 0x0, "704fb9041956b839740800e5161157ca24ec6d19d71b38ad406fbd89538ee2bfa4d2dcc14588dbdf8651d3bf0be882da26eb46127e40174b21d976fb189f0275553dfb70c136d2d7b30d830d32698747"}, 0xd8)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x2, 0x67, 0x0, 0x1}, {0x2, 0x15, 0x81, 0x4}, {0xff, 0x40, 0x8}, {0x2, 0x48, 0x4, 0x79a}, {0x94b, 0x81, 0x1, 0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000300)={r4, 0x40})
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x1406, 0x10, 0x781, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x1410, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, r0, 0x7fffffff)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
remap_file_pages(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x0, 0x1f, 0x3) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "4ed2de0be52c1024", "9df8933cb9039708ea631cde8678a74556f05cc06db11591679ff7b9e8d60aab", "57176599", "b511176db404546a"}, 0x38) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x4, @loopback, 0x2}}, 0x0, 0x0, 0x40, 0x0, "704fb9041956b839740800e5161157ca24ec6d19d71b38ad406fbd89538ee2bfa4d2dcc14588dbdf8651d3bf0be882da26eb46127e40174b21d976fb189f0275553dfb70c136d2d7b30d830d32698747"}, 0xd8) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x2, 0x67, 0x0, 0x1}, {0x2, 0x15, 0x81, 0x4}, {0xff, 0x40, 0x8}, {0x2, 0x48, 0x4, 0x79a}, {0x94b, 0x81, 0x1, 0x6}]}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000300)={r4, 0x40}) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x1406, 0x10, 0x781, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x1410, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, r0, 0x7fffffff) (async)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
shmget(0x1, 0x4000, 0x10, &(0x7f0000007000/0x4000)=nil)
syz_open_dev$ttys(0xc, 0x2, 0x1)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) (async)
shmget(0x1, 0x4000, 0x10, &(0x7f0000007000/0x4000)=nil) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)

00:33:08 executing program 5:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x1000000000002, 0xfffffffffffffffd, 0x1)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x1000000000002, 0xfffffffffffffffd, 0x1) (async)

00:33:08 executing program 4:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x440040, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) (async, rerun: 32)
syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32)

00:33:08 executing program 4:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x0, 0x40810, 0xffffffffffffffff, 0xfb000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mprotect(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000007)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/net\x00')
write$6lowpan_enable(r0, &(0x7f00000000c0)='1', 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040))

00:33:08 executing program 0:
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:08 executing program 2:
munlock(&(0x7f0000001000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
shmget(0x1, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
munlock(&(0x7f0000001000/0x4000)=nil, 0x4000) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
shmget(0x1, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) (async)

00:33:08 executing program 4:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3000000, 0x11, 0xffffffffffffffff, 0x7)
shmget(0x0, 0x2000, 0x10, &(0x7f0000005000/0x2000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3000000, 0x11, 0xffffffffffffffff, 0x7)
shmget(0x0, 0x2000, 0x10, &(0x7f0000005000/0x2000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3000000, 0x11, 0xffffffffffffffff, 0x7) (async)
shmget(0x0, 0x2000, 0x10, &(0x7f0000005000/0x2000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:08 executing program 5:
r0 = msgget$private(0x0, 0x44)
r1 = getuid()
ioprio_get$uid(0x3, r1)
r2 = getgid()
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r3=>0x0)
r4 = gettid()
setpgid(r4, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, r1, 0xee00, 0xee01, r2, 0x8, 0x5}, 0x0, 0x0, 0x4, 0x10001, 0x6, 0x0, 0x0, 0xe3d, 0x9, 0x7f0, r3, r4})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:08 executing program 0:
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:08 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:08 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000008000/0x4000)=nil, 0x4000}, 0x1})
mbind(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xe, 0xcb, 0x1)
pkey_mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x3000001, 0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x0, 0x40810, 0xffffffffffffffff, 0xfb000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
mprotect(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000007) (async, rerun: 32)
r1 = gettid() (rerun: 32)
syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/net\x00') (async)
write$6lowpan_enable(r0, &(0x7f00000000c0)='1', 0x1) (async, rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040))

00:33:08 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:08 executing program 5:
r0 = msgget$private(0x0, 0x44)
r1 = getuid()
ioprio_get$uid(0x3, r1)
r2 = getgid() (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r3=>0x0) (async)
r4 = gettid()
setpgid(r4, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, r1, 0xee00, 0xee01, r2, 0x8, 0x5}, 0x0, 0x0, 0x4, 0x10001, 0x6, 0x0, 0x0, 0xe3d, 0x9, 0x7f0, r3, r4})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mmap$usbfs(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3000000, 0x11, 0xffffffffffffffff, 0x7) (async)
shmget(0x0, 0x2000, 0x10, &(0x7f0000005000/0x2000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:08 executing program 4:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000008000/0x4000)=nil, 0x4000}, 0x1})
mbind(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xe, 0xcb, 0x1)
pkey_mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x3000001, 0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

00:33:08 executing program 0:
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x0, 0x40810, 0xffffffffffffffff, 0xfb000) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
mprotect(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000007) (async)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/net\x00') (async)
write$6lowpan_enable(r0, &(0x7f00000000c0)='1', 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040))

00:33:08 executing program 5:
r0 = msgget$private(0x0, 0x44)
r1 = getuid()
ioprio_get$uid(0x3, r1) (async)
r2 = getgid() (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r3=>0x0)
r4 = gettid()
setpgid(r4, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, r1, 0xee00, 0xee01, r2, 0x8, 0x5}, 0x0, 0x0, 0x4, 0x10001, 0x6, 0x0, 0x0, 0xe3d, 0x9, 0x7f0, r3, r4})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:08 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000005000/0x3000)=nil, 0x3000})

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x9, 0x7, 0x0)

00:33:08 executing program 4:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x5)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa2d80, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x3, "8f013bebeebbbd47645d72c12043648c62b608ed04eace69621bdf69d92f46572beff9cdfd86428425e9f157a458c2a1f4dbb6d64503089b60d2983033e9208e8c0e7aa95e81bcc088e5d73f9ff325b3fbea405a375c1e86eb00217d6a57fa0845718338490de41de94ba70d5cf4ae43ef8c43edaccfaf471f66d85c14418934dac07705ba87148f2b04f33c608a0967f667c997843a865ebd8451cfaa7824574a5fc263732f836d612ce65e2d9a8c8eddbd8667c1e3db83ba846fadd474d0e673c9d7534cce8644bc69c0d04b25e97b4f1a86a42469a04aa0f42be81f14e691a7970ccf2d67fd20567c710b4b5d884e832793ef78db3a"}, 0xff, 0x800)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000001, 0x1010, r1, 0x29ef0000)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}})

00:33:08 executing program 2:
mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0x4)

00:33:08 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mremap(&(0x7f0000220000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000220000/0x3000)=nil)
mmap$binder(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000)

00:33:08 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000005000/0x3000)=nil, 0x3000})

00:33:08 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:08 executing program 2:
mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) (async, rerun: 32)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0x4) (rerun: 32)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x9, 0x7, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x9, 0x7, 0x0) (async)

00:33:08 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)

00:33:08 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mremap(&(0x7f0000220000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000220000/0x3000)=nil)
mmap$binder(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mremap(&(0x7f0000220000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000220000/0x3000)=nil) (async)
mmap$binder(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7fff) (async)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) (async)

00:33:08 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000005000/0x3000)=nil, 0x3000})

00:33:08 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)

00:33:08 executing program 2:
mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) (async)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0x4)

00:33:08 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mremap(&(0x7f0000220000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000220000/0x3000)=nil) (async)
mmap$binder(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7fff) (async)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000)

00:33:08 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:08 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x9, 0x7, 0x0)

00:33:08 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:08 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f000000e000/0x4000)=nil, 0x4000})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x100)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f000000c000/0x2000)=nil, 0x8, 0x2, 0x1e})

00:33:08 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:08 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
remap_file_pages(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x200000a, 0x0, 0x2)

00:33:08 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x208001, 0x0)
mmap$snddsp_status(&(0x7f0000380000/0x4000)=nil, 0x1000, 0x8, 0x13, r0, 0x82000000)
mmap$dsp(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0)

00:33:08 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x140a, 0x4, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x48000)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4)

00:33:09 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) (async, rerun: 32)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (rerun: 32)
remap_file_pages(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x200000a, 0x0, 0x2)

00:33:09 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f000000e000/0x4000)=nil, 0x4000}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x100) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f000000c000/0x2000)=nil, 0x8, 0x2, 0x1e})

00:33:09 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x208001, 0x0)
mmap$snddsp_status(&(0x7f0000380000/0x4000)=nil, 0x1000, 0x8, 0x13, r0, 0x82000000)
mmap$dsp(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x208001, 0x0) (async)
mmap$snddsp_status(&(0x7f0000380000/0x4000)=nil, 0x1000, 0x8, 0x13, r0, 0x82000000) (async)
mmap$dsp(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) (async)

00:33:09 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x140a, 0x4, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x48000) (async)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4)

00:33:09 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x208001, 0x0)
mmap$snddsp_status(&(0x7f0000380000/0x4000)=nil, 0x1000, 0x8, 0x13, r0, 0x82000000) (async)
mmap$dsp(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0)

00:33:09 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f000000e000/0x4000)=nil, 0x4000}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x100) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f000000c000/0x2000)=nil, 0x8, 0x2, 0x1e})

00:33:09 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
remap_file_pages(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x200000a, 0x0, 0x2)

00:33:09 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x140a, 0x4, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x48000) (async)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async, rerun: 64)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) (rerun: 64)

00:33:09 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @sack_perm, @window={0x3, 0x1f, 0x1b}, @mss={0x2, 0x10000}], 0x4)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000040)={0x43, "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"})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x3d, 0x101, 0x0)

00:33:09 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x8000000000000000, 0x80000001, 0x7)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:09 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)

00:33:09 executing program 1:
mbind(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0xffff, 0x40902)
mmap$snddsp_control(&(0x7f0000382000/0x2000)=nil, 0x1000, 0x1, 0x4000010, r0, 0x83000000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x240ac0, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9)

00:33:09 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1404, 0xb05, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:09 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) (async, rerun: 32)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 1:
mbind(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0xffff, 0x40902)
mmap$snddsp_control(&(0x7f0000382000/0x2000)=nil, 0x1000, 0x1, 0x4000010, r0, 0x83000000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x240ac0, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9)

00:33:09 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x20, 0x3})
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)

00:33:09 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1404, 0xb05, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1404, 0xb05, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)

00:33:09 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @sack_perm, @window={0x3, 0x1f, 0x1b}, @mss={0x2, 0x10000}], 0x4)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000040)={0x43, "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"})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x3d, 0x101, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @sack_perm, @window={0x3, 0x1f, 0x1b}, @mss={0x2, 0x10000}], 0x4) (async)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000040)={0x43, "3d0da79985116fd165e9bc384cbde4abd1600c04a21f0d250c6045fa7e86db6d5ce8f5719622b13eaa2ae21c2075bbd1d16f41601170ed9ff1b9588c29baeec0b1d2884a1671995b783e73d3994978d384dad025c390023e751b261b4aa807c4afce384a6fe328ee53e5b00026da21e6424de6568b3203d54dfa01e885e6590310a52875a0de314cd010bde3e193e415ee97f890fbb977781a3add3df0ebfe37e64626733e661defcae54129350d0ab7c0f27ef15f06c5e95493f8330bff123806f93da4827fc67744e7b2ad6824f4a1da2f6ab1a55a98b1faa591a57235db721e2a4350f6ddd11f3a133a33bf0b0c18960f4189f3a33991649de83e090a55aaaf14cb89b141082cd808c817cab24278522ffc9ab4bdac450dd49779210d69a89e44ca28b6add6714dda3fb6748006c501f854506c480d55e8691e2345e0afdaf6fa1bd0775743ac2eb557846c67070c67f7bc38514ef36d5318ab298d29490b68246fac66c146c1920665b226e18834f64035193961e9ad52228b4869061c6db1548ecc796e5e1d19e12c07bbd6e13c8188634ec48974e4e076d7c8cbef5b641031879589ee2658fcb8e9c1ecfd8062e9cc49eb399c2a6b6a7838123ffee6d43dbf9f65232839fded54875734eeb493f39dac761bffd1281e316e4398a29aaf253fe364a20fcd6269b21dd4a6972e02c311fc2206e9d8cce16a903c73bbfe49"}) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x3d, 0x101, 0x0) (async)

00:33:09 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x8000000000000000, 0x80000001, 0x7) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:09 executing program 1:
mbind(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0xffff, 0x40902)
mmap$snddsp_control(&(0x7f0000382000/0x2000)=nil, 0x1000, 0x1, 0x4000010, r0, 0x83000000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x240ac0, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9)

00:33:09 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)

00:33:09 executing program 2:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1404, 0xb05, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:09 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mprotect(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000006)

00:33:09 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @sack_perm, @window={0x3, 0x1f, 0x1b}, @mss={0x2, 0x10000}], 0x4) (async)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000040)={0x43, "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"}) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x3d, 0x101, 0x0)

00:33:09 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:33:09 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x8000000000000000, 0x80000001, 0x7)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x8000000000000000, 0x80000001, 0x7) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:09 executing program 2:
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1404, 0x0, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
munlock(&(0x7f0000007000/0x1000)=nil, 0x1000)

00:33:09 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000220000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSIG(r2, 0x40045436, 0x28)

00:33:09 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mprotect(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000006)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mprotect(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000006) (async)

00:33:09 executing program 3:
mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:09 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:33:09 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mprotect(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x2000006)

00:33:09 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:33:09 executing program 3:
mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:09 executing program 2:
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1404, 0x0, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
munlock(&(0x7f0000007000/0x1000)=nil, 0x1000)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1404, 0x0, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) (async)
munlock(&(0x7f0000007000/0x1000)=nil, 0x1000) (async)

00:33:09 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000220000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSIG(r2, 0x40045436, 0x28)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
userfaultfd(0x800) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000220000/0x3000)=nil, 0x3000}, 0x1}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
ioctl$TIOCSIG(r2, 0x40045436, 0x28) (async)

00:33:09 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:09 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
mbind(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0xffffffffffffffdf, 0x81, 0x1)

00:33:09 executing program 3:
mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:09 executing program 2:
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1404, 0x0, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
munlock(&(0x7f0000007000/0x1000)=nil, 0x1000)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1404, 0x0, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) (async)
munlock(&(0x7f0000007000/0x1000)=nil, 0x1000) (async)

00:33:09 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:33:09 executing program 0:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x1)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffff69)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0xa4003, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = userfaultfd(0x800)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000220000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSIG(r2, 0x40045436, 0x28)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
userfaultfd(0x800) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000220000/0x3000)=nil, 0x3000}, 0x1}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
ioctl$TIOCSIG(r2, 0x40045436, 0x28) (async)

00:33:09 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x16, 0xa, 0x89, &(0x7f0000000140)="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"})
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000006000/0x3000)=nil})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000002000/0x3000)=nil, 0x7, 0x4, 0x53})

00:33:09 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
mbind(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0xffffffffffffffdf, 0x81, 0x1)

00:33:09 executing program 3:
syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x325001)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}})
r0 = userfaultfd(0x800)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/dmmidi#\x00')

00:33:09 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:33:09 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x16, 0xa, 0x89, &(0x7f0000000140)="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"}) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000006000/0x3000)=nil})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000002000/0x3000)=nil, 0x7, 0x4, 0x53})

00:33:09 executing program 3:
syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x325001)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}})
r0 = userfaultfd(0x800)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/dmmidi#\x00')
syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x325001) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) (async)
userfaultfd(0x800) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/dmmidi#\x00') (async)

00:33:09 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x100, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})

00:33:09 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x16, 0xa, 0x89, &(0x7f0000000140)="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"}) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000006000/0x3000)=nil}) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000002000/0x3000)=nil, 0x7, 0x4, 0x53})

00:33:09 executing program 0:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x1) (async)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffff69)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0xa4003, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$VT_WAITACTIVE(r2, 0x5607)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:09 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

00:33:09 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
mbind(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0xffffffffffffffdf, 0x81, 0x1)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) (async)
mbind(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0xffffffffffffffdf, 0x81, 0x1) (async)

00:33:09 executing program 0:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x1)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffff69)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0xa4003, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x1) (async)
ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffff69) (async)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0xa4003, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$VT_WAITACTIVE(r2, 0x5607) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:09 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x100, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x100, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async)

00:33:09 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:33:09 executing program 3:
syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x325001) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}})
r0 = userfaultfd(0x800)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async)
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/dmmidi#\x00')

00:33:09 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffc0, 0x20)

00:33:09 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000040006000000000000000000"], 0x20}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, r4, 0x1, 0xfffffffe}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x74081404e8e98b08}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="20002abd7000ffdbdf250d00ffb11f99e1cd65385e42a952c62ff2d5010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8008a208}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x15a2c3dc626e22d0}, 0x800)
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x81, 0x4)

00:33:09 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:33:09 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x100, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})

00:33:09 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000))
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xee75, 0x2, 0x0, 0x4})

00:33:09 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffc0, 0x20)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffc0, 0x20) (async)

00:33:09 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, 0x0, 0x0)

00:33:09 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x280100)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
mmap$fb(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, r2, 0x2b000)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:09 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000))
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xee75, 0x2, 0x0, 0x4})
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xee75, 0x2, 0x0, 0x4}) (async)

00:33:09 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffc0, 0x20)

00:33:09 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0xfffffffffffffa71, 0x5)
shmget(0x2, 0x3000, 0x8, &(0x7f0000222000/0x3000)=nil)

00:33:09 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) (async, rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 64)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x280100)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
mmap$fb(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, r2, 0x2b000) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:09 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000040006000000000000000000"], 0x20}}, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0}) (async, rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r8=>0x0}) (rerun: 32)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, r4, 0x1, 0xfffffffe}, 0x14}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x74081404e8e98b08}}, 0x0) (async, rerun: 32)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="20002abd7000ffdbdf250d00ffb11f99e1cd65385e42a952c62ff2d5010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async, rerun: 32)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8008a208}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x15a2c3dc626e22d0}, 0x800) (async, rerun: 32)
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x81, 0x4) (rerun: 32)

00:33:09 executing program 4:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000040006000000000000000000"], 0x20}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, r4, 0x1, 0xfffffffe}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x74081404e8e98b08}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="20002abd7000ffdbdf250d00ffb11f99e1cd65385e42a952c62ff2d5010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8008a208}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x15a2c3dc626e22d0}, 0x800)
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x81, 0x4)

00:33:09 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xee75, 0x2, 0x0, 0x4})

00:33:09 executing program 2:
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000000000/0x4000)=nil})
gettid()
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:09 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0xfffffffffffffa71, 0x5)
shmget(0x2, 0x3000, 0x8, &(0x7f0000222000/0x3000)=nil)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0xfffffffffffffa71, 0x5) (async)
shmget(0x2, 0x3000, 0x8, &(0x7f0000222000/0x3000)=nil) (async)

00:33:09 executing program 3:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x280100)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
mmap$fb(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, r2, 0x2b000)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x280100) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
mmap$fb(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, r2, 0x2b000) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:09 executing program 0:
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)

00:33:09 executing program 4:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000040006000000000000000000"], 0x20}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, r4, 0x1, 0xfffffffe}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x74081404e8e98b08}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="20002abd7000ffdbdf250d00ffb11f99e1cd65385e42a952c62ff2d5010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8008a208}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x15a2c3dc626e22d0}, 0x800)
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x81, 0x4)

00:33:09 executing program 2:
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000000000/0x4000)=nil}) (async)
gettid() (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:10 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000040006000000000000000000"], 0x20}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, r4, 0x1, 0xfffffffe}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x74081404e8e98b08}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="20002abd7000ffdbdf250d00ffb11f99e1cd65385e42a952c62ff2d5010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8008a208}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x15a2c3dc626e22d0}, 0x800)
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x81, 0x4)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000040006000000000000000000"], 0x20}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, r4, 0x1, 0xfffffffe}, 0x14}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x74081404e8e98b08}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="20002abd7000ffdbdf250d00ffb11f99e1cd65385e42a952c62ff2d5010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8008a208}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x15a2c3dc626e22d0}, 0x800) (async)
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x81, 0x4) (async)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0xfffffffffffffa71, 0x5)
shmget(0x2, 0x3000, 0x8, &(0x7f0000222000/0x3000)=nil)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0xfffffffffffffa71, 0x5) (async)
shmget(0x2, 0x3000, 0x8, &(0x7f0000222000/0x3000)=nil) (async)

00:33:10 executing program 3:
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000007000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000006000/0x2000)=nil, 0x2000)

00:33:10 executing program 0:
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) (async)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)

00:33:10 executing program 4:
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)

00:33:10 executing program 2:
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000000000/0x4000)=nil}) (async)
gettid() (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:10 executing program 4:
syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x325001)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}})
r0 = userfaultfd(0x800)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
mmap$dsp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/dmmidi#\x00')

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
mmap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3000000, 0x4000010, r0, 0xa5ca000)

00:33:10 executing program 3:
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000007000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000006000/0x2000)=nil, 0x2000)

00:33:10 executing program 1:
mbind(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x7, 0x63, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})

00:33:10 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
munlock(&(0x7f0000002000/0x4000)=nil, 0x4000)
shmget(0x1, 0x4000, 0x10, &(0x7f0000004000/0x4000)=nil)
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x6, 0xffffffffffffffff)

00:33:10 executing program 0:
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) (async)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)

00:33:10 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:10 executing program 1:
mbind(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x7, 0x63, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})

00:33:10 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:10 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
munlock(&(0x7f0000002000/0x4000)=nil, 0x4000)
shmget(0x1, 0x4000, 0x10, &(0x7f0000004000/0x4000)=nil) (async)
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x6, 0xffffffffffffffff)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) (async)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
mmap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3000000, 0x4000010, r0, 0xa5ca000)

00:33:10 executing program 3:
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000007000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000006000/0x2000)=nil, 0x2000)

00:33:10 executing program 1:
mbind(&(0x7f0000381000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x7, 0x63, 0x2) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (rerun: 32)

00:33:10 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000))
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "587d4d03041c3b6e", "e425da8616711a44419957385fcd7194", '\x00', "56082df2eb635adc"}, 0x28)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:10 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32)
mmap(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3000000, 0x4000010, r0, 0xa5ca000) (rerun: 32)

00:33:10 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
munlock(&(0x7f0000002000/0x4000)=nil, 0x4000)
shmget(0x1, 0x4000, 0x10, &(0x7f0000004000/0x4000)=nil)
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x6, 0xffffffffffffffff)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
munlock(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
shmget(0x1, 0x4000, 0x10, &(0x7f0000004000/0x4000)=nil) (async)
pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x6, 0xffffffffffffffff) (async)

00:33:10 executing program 3:
mremap(&(0x7f0000005000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x800000)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x4)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000})
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r1, 0xb59e1000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000080)='0', 0x1)
socket$l2tp(0x2, 0x2, 0x73)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x280000a, 0x10, r0, 0x83000000)

00:33:10 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x4000010, 0xffffffffffffffff, 0x7e000)

00:33:10 executing program 4:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x101)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404001, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000c147f002abd7000ffdbdf2508003d000200000008000b000300000006003d00020000000800030002000000080003000100000008003d0001000000080003000300000008000300030000cf5a"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000091)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x30, 0xffffffffffffffff, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0x8d, "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"})

00:33:10 executing program 2:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000008000/0x2000)=nil)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$usbfs(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2)
mmap$dsp(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x0)

00:33:10 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:10 executing program 2:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000008000/0x2000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000008000/0x2000)=nil) (async)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x2) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$usbfs(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2)
mmap$dsp(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x0)

00:33:10 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x38)
r3 = socket(0x11, 0x3, 0x6)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340)=0x4)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000)
connect$can_bcm(r3, &(0x7f0000000380)={0x1d, r4}, 0x10)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0xf2, "84baefd85d0c20d0006d098fac04720febfa6871c16e17dd718b411cb0d29816d1339a9ba703e5c375ecf5672f2735ea8ac4867bb0f4bc82aa7ed6b833446ab125d283f47d69764ee19c04aabfbfe9a38e726eca1df9fbff4d2402eb38c9876cc04605ea58a2759342668f826d215d771cefa6debd775175612e6086cb3e6443623d78ab7126e7823d0c4d1f23ceae8d702d18c0adbf2a88d378fd795577391681fbdcca0b54a96b2be32d6b7da16c6cc6c40c72e07630758674cfb22c3b4fc42e7dec1063046341a5b050b65c6d77737e6377159013b19999ce877dfc5974f363dfc0809751ce0f0b54977d4a0b237c6da498bbf116a6aa10f27943c5608d42fc64ab4d41e8e9717f6e36efa8bf318734158a0e168f84bcf3f4b57ab3528a6bc5ad9c12464c2723c18b80087ac236cb6d861bc107f5787a540bdb540c1771decb8d8aa39c0b786c47c6661095f9528abdfef99a0685f1c9bd35c3f07974da7b5ff59c75fc3a6cbd26f0c5dcecf1e9cdc8e9030989181de37849a8b37f719dfae5d772a839fe3fbba4be3def508566502e206ed7739daa1bfb38078ebb0b16279d149d8616f1983b3e62bc4a0eeb2d9b712db19dad00e66a75f5ce866e9b8a019afc4634340b1caa3e03c1610b8b9c83d178aad3773bbef7bf323eaa183e1537af95b8c71a255d65cf7581f6696c7319e94a50aceadbb6e9b272ccd92a846490"})

00:33:10 executing program 3:
mremap(&(0x7f0000005000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x800000)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x4)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000})
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r1, 0xb59e1000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000080)='0', 0x1)
socket$l2tp(0x2, 0x2, 0x73)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x280000a, 0x10, r0, 0x83000000)
mremap(&(0x7f0000005000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x800000) (async)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x4) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r1, 0xb59e1000) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
write$6lowpan_enable(r2, &(0x7f0000000080)='0', 0x1) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x280000a, 0x10, r0, 0x83000000) (async)

00:33:10 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x4000010, 0xffffffffffffffff, 0x7e000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x4000010, 0xffffffffffffffff, 0x7e000) (async)

00:33:10 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000))

00:33:10 executing program 2:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000008000/0x2000)=nil)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x2)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$usbfs(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2)
mmap$dsp(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x2) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$usbfs(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2) (async)
mmap$dsp(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x0) (async)

00:33:10 executing program 3:
mremap(&(0x7f0000005000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x800000)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x4)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000})
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r1, 0xb59e1000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000080)='0', 0x1)
socket$l2tp(0x2, 0x2, 0x73)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x280000a, 0x10, r0, 0x83000000)
mremap(&(0x7f0000005000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x800000) (async)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x4) (async)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r1, 0xb59e1000) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
write$6lowpan_enable(r2, &(0x7f0000000080)='0', 0x1) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x280000a, 0x10, r0, 0x83000000) (async)

00:33:10 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000))

00:33:10 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

00:33:10 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x54, "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"})

00:33:10 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000))

00:33:10 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x4000010, 0xffffffffffffffff, 0x7e000)

00:33:10 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x51, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000240)={r1, 0x5, 0x10001})
mmap$usbfs(&(0x7f0000229000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x10000000000006)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x12143, 0x0)
r2 = socket(0xf, 0x6, 0x3)
ioctl$VT_WAITACTIVE(r0, 0x5607)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1407, 0x300, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x48000)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x1407, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1f6215491916fea2}, 0x20000004)

00:33:10 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (fail_nth: 1)

00:33:10 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x48080)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:10 executing program 1:
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0xffffffffffffffff, 0x4, 0x3)
mbind(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000), 0x40081, 0x0)

00:33:10 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:10 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x51, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000240)={r1, 0x5, 0x10001})
mmap$usbfs(&(0x7f0000229000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x10000000000006)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x12143, 0x0)
r2 = socket(0xf, 0x6, 0x3)
ioctl$VT_WAITACTIVE(r0, 0x5607)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1407, 0x300, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x48000)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x1407, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1f6215491916fea2}, 0x20000004)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x51, 0x1) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000240)={r1, 0x5, 0x10001}) (async)
mmap$usbfs(&(0x7f0000229000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x10000000000006) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x12143, 0x0) (async)
socket(0xf, 0x6, 0x3) (async)
ioctl$VT_WAITACTIVE(r0, 0x5607) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1407, 0x300, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x1407, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1f6215491916fea2}, 0x20000004) (async)

00:33:10 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x48080)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x48080) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

[ 1972.431778] FAULT_INJECTION: forcing a failure.
[ 1972.431778] name failslab, interval 1, probability 0, space 0, times 0
00:33:10 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

00:33:10 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)

[ 1972.482646] CPU: 1 PID: 19299 Comm: syz-executor.4 Not tainted 4.14.293-syzkaller #0
[ 1972.490566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1972.499930] Call Trace:
[ 1972.502520]  dump_stack+0x1b2/0x281
[ 1972.506155]  should_fail.cold+0x10a/0x149
[ 1972.510309]  should_failslab+0xd6/0x130
[ 1972.514290]  __kmalloc+0x2c1/0x400
[ 1972.517829]  ? tty_write+0x4e0/0x740
[ 1972.521544]  tty_write+0x4e0/0x740
[ 1972.525085]  ? aa_path_link+0x3a0/0x3a0
[ 1972.529054]  ? n_tty_open+0x160/0x160
00:33:10 executing program 3:
mremap(&(0x7f0000003000/0xd000)=nil, 0xd000, 0x7000, 0x3, &(0x7f0000006000/0x7000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$usbfs(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3800002, 0x1010, 0xffffffffffffffff, 0x2)
munlock(&(0x7f000000c000/0x4000)=nil, 0x4000)

00:33:10 executing program 1:
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0xffffffffffffffff, 0x4, 0x3)
mbind(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000), 0x40081, 0x0)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0xffffffffffffffff, 0x4, 0x3) (async)
mbind(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000), 0x40081, 0x0) (async)

00:33:10 executing program 3:
mremap(&(0x7f0000003000/0xd000)=nil, 0xd000, 0x7000, 0x3, &(0x7f0000006000/0x7000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$usbfs(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3800002, 0x1010, 0xffffffffffffffff, 0x2) (async, rerun: 64)
munlock(&(0x7f000000c000/0x4000)=nil, 0x4000) (rerun: 64)

[ 1972.532859]  __vfs_write+0xe4/0x630
[ 1972.536482]  ? tty_compat_ioctl+0x240/0x240
[ 1972.540805]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1972.545824]  ? kernel_read+0x110/0x110
[ 1972.549713]  ? common_file_perm+0x3ee/0x580
[ 1972.554041]  ? security_file_permission+0x82/0x1e0
[ 1972.558971]  ? rw_verify_area+0xe1/0x2a0
[ 1972.563035]  vfs_write+0x17f/0x4d0
[ 1972.566578]  SyS_write+0xf2/0x210
[ 1972.570031]  ? SyS_read+0x210/0x210
[ 1972.573654]  ? __do_page_fault+0x159/0xad0
[ 1972.577892]  ? do_syscall_64+0x4c/0x640
[ 1972.581864]  ? SyS_read+0x210/0x210
[ 1972.585489]  do_syscall_64+0x1d5/0x640
[ 1972.589377]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1972.594580] RIP: 0033:0x7f3bfb73f409
[ 1972.598281] RSP: 002b:00007f3bfa0b4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1972.606266] RAX: ffffffffffffffda RBX: 00007f3bfb851f80 RCX: 00007f3bfb73f409
[ 1972.613516] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003
[ 1972.620764] RBP: 00007f3bfa0b41d0 R08: 0000000000000000 R09: 0000000000000000
00:33:10 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (fail_nth: 2)

00:33:10 executing program 1:
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0xffffffffffffffff, 0x4, 0x3) (async, rerun: 32)
mbind(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000), 0x40081, 0x0) (rerun: 32)

00:33:10 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mbind(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x1, 0x29, 0x0)

00:33:10 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x48080)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1, 0x51, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000240)={r1, 0x5, 0x10001}) (async)
mmap$usbfs(&(0x7f0000229000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x10000000000006) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x12143, 0x0) (async)
r2 = socket(0xf, 0x6, 0x3) (async)
ioctl$VT_WAITACTIVE(r0, 0x5607) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1407, 0x300, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x1407, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1f6215491916fea2}, 0x20000004)

00:33:10 executing program 3:
mremap(&(0x7f0000003000/0xd000)=nil, 0xd000, 0x7000, 0x3, &(0x7f0000006000/0x7000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mmap$usbfs(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3800002, 0x1010, 0xffffffffffffffff, 0x2) (async, rerun: 32)
munlock(&(0x7f000000c000/0x4000)=nil, 0x4000) (rerun: 32)

[ 1972.628019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1972.635276] R13: 00007ffd34183faf R14: 00007f3bfa0b4300 R15: 0000000000022000
00:33:10 executing program 0:
r0 = socket(0x2, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1406, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x50)
syz_open_dev$ptys(0xc, 0x3, 0x0)

[ 1972.705487] FAULT_INJECTION: forcing a failure.
[ 1972.705487] name failslab, interval 1, probability 0, space 0, times 0
[ 1972.717676] CPU: 0 PID: 19346 Comm: syz-executor.4 Not tainted 4.14.293-syzkaller #0
[ 1972.725556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1972.734905] Call Trace:
[ 1972.737491]  dump_stack+0x1b2/0x281
[ 1972.741117]  should_fail.cold+0x10a/0x149
[ 1972.745264]  should_failslab+0xd6/0x130
[ 1972.749237]  __kmalloc+0x6d/0x400
00:33:10 executing program 0:
r0 = socket(0x2, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1406, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x50) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mprotect(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mprotect(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
mprotect(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2) (async)

00:33:10 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
mprotect(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2)

00:33:10 executing program 0:
r0 = socket(0x2, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) (async, rerun: 64)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1406, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x50)
syz_open_dev$ptys(0xc, 0x3, 0x0)

[ 1972.752697]  ? tty_buffer_alloc+0xc0/0x270
[ 1972.756941]  tty_buffer_alloc+0xc0/0x270
[ 1972.761014]  __tty_buffer_request_room+0x12c/0x290
[ 1972.765944]  tty_insert_flip_string_fixed_flag+0x8b/0x210
[ 1972.771487]  tty_insert_flip_string_and_push_buffer+0x3e/0x160
[ 1972.777461]  pty_write+0xc3/0xf0
[ 1972.780829]  n_tty_write+0x85e/0xda0
[ 1972.784545]  ? n_tty_open+0x160/0x160
[ 1972.788350]  ? do_wait_intr_irq+0x270/0x270
[ 1972.792676]  ? __might_fault+0x177/0x1b0
[ 1972.796733]  tty_write+0x410/0x740
[ 1972.800262]  ? n_tty_open+0x160/0x160
[ 1972.804045]  __vfs_write+0xe4/0x630
[ 1972.807653]  ? tty_compat_ioctl+0x240/0x240
[ 1972.811960]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1972.816961]  ? kernel_read+0x110/0x110
[ 1972.820853]  ? common_file_perm+0x3ee/0x580
[ 1972.825155]  ? security_file_permission+0x82/0x1e0
[ 1972.830062]  ? rw_verify_area+0xe1/0x2a0
[ 1972.834102]  vfs_write+0x17f/0x4d0
[ 1972.837625]  SyS_write+0xf2/0x210
[ 1972.841062]  ? SyS_read+0x210/0x210
[ 1972.844671]  ? __do_page_fault+0x159/0xad0
[ 1972.848881]  ? do_syscall_64+0x4c/0x640
[ 1972.852831]  ? SyS_read+0x210/0x210
[ 1972.856440]  do_syscall_64+0x1d5/0x640
[ 1972.860308]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1972.865472] RIP: 0033:0x7f3bfb73f409
[ 1972.869177] RSP: 002b:00007f3bfa0b4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1972.876964] RAX: ffffffffffffffda RBX: 00007f3bfb851f80 RCX: 00007f3bfb73f409
[ 1972.884208] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003
[ 1972.891460] RBP: 00007f3bfa0b41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1972.898710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1972.905961] R13: 00007ffd34183faf R14: 00007f3bfa0b4300 R15: 0000000000022000
[ 1972.913218] 
[ 1972.913220] ======================================================
[ 1972.913222] WARNING: possible circular locking dependency detected
[ 1972.913223] 4.14.293-syzkaller #0 Not tainted
[ 1972.913225] ------------------------------------------------------
[ 1972.913227] syz-executor.4/19346 is trying to acquire lock:
[ 1972.913228]  (console_owner){....}, at: [<ffffffff8143f7c7>] console_unlock+0x307/0xf20
[ 1972.913232] 
[ 1972.913234] but task is already holding lock:
[ 1972.913234]  (&(&port->lock)->rlock){-.-.}, at: [<ffffffff8355c5ab>] tty_insert_flip_string_and_push_buffer+0x2b/0x160
[ 1972.913239] 
[ 1972.913241] which lock already depends on the new lock.
[ 1972.913242] 
[ 1972.913243] 
[ 1972.913246] the existing dependency chain (in reverse order) is:
[ 1972.913247] 
[ 1972.913248] -> #2 (&(&port->lock)->rlock){-.-.}:
[ 1972.913256]        _raw_spin_lock_irqsave+0x8c/0xc0
[ 1972.913258]        tty_port_tty_get+0x1d/0x80
[ 1972.913260]        tty_port_default_wakeup+0x11/0x40
[ 1972.913263]        serial8250_tx_chars+0x3fe/0xc70
[ 1972.913265]        serial8250_handle_irq.part.0+0x28d/0x330
[ 1972.913267]        serial8250_default_handle_irq+0x8a/0x1f0
[ 1972.913270]        serial8250_interrupt+0xf3/0x210
[ 1972.913272]        __handle_irq_event_percpu+0xee/0x7f0
[ 1972.913274]        handle_irq_event+0xed/0x240
[ 1972.913277]        handle_edge_irq+0x224/0xc40
[ 1972.913278]        handle_irq+0x35/0x50
[ 1972.913280]        do_IRQ+0x93/0x1d0
[ 1972.913283]        ret_from_intr+0x0/0x1e
[ 1972.913285]        _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 1972.913287]        uart_write+0x2dd/0x560
[ 1972.913289]        do_output_char+0x4f5/0x750
[ 1972.913291]        n_tty_write+0x3e3/0xda0
[ 1972.913292]        tty_write+0x410/0x740
[ 1972.913294]        redirected_tty_write+0x9c/0xb0
[ 1972.913295]        do_iter_write+0x3da/0x550
[ 1972.913296]        vfs_writev+0x125/0x290
[ 1972.913297]        do_writev+0xfc/0x2c0
[ 1972.913298]        do_syscall_64+0x1d5/0x640
[ 1972.913300]        entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1972.913301] 
[ 1972.913301] -> #1 (&port_lock_key){-.-.}:
[ 1972.913306]        _raw_spin_lock_irqsave+0x8c/0xc0
[ 1972.913307]        serial8250_console_write+0x7d5/0xa10
[ 1972.913308]        console_unlock+0x99d/0xf20
[ 1972.913310]        vprintk_emit+0x224/0x620
[ 1972.913311]        vprintk_func+0x58/0x160
[ 1972.913312]        printk+0x9e/0xbc
[ 1972.913313]        register_console+0x6f4/0xad0
[ 1972.913315]        univ8250_console_init+0x2f/0x3a
[ 1972.913316]        console_init+0x46/0x53
[ 1972.913317]        start_kernel+0x521/0x763
[ 1972.913319]        secondary_startup_64+0xa5/0xb0
[ 1972.913319] 
[ 1972.913320] -> #0 (console_owner){....}:
[ 1972.913324]        lock_acquire+0x170/0x3f0
[ 1972.913325]        console_unlock+0x36f/0xf20
[ 1972.913326]        vprintk_emit+0x224/0x620
[ 1972.913328]        vprintk_func+0x58/0x160
[ 1972.913329]        printk+0x9e/0xbc
[ 1972.913330]        should_fail.cold+0xdf/0x149
[ 1972.913331]        should_failslab+0xd6/0x130
[ 1972.913332]        __kmalloc+0x6d/0x400
[ 1972.913334]        tty_buffer_alloc+0xc0/0x270
[ 1972.913335]        __tty_buffer_request_room+0x12c/0x290
[ 1972.913337]        tty_insert_flip_string_fixed_flag+0x8b/0x210
[ 1972.913339]        tty_insert_flip_string_and_push_buffer+0x3e/0x160
[ 1972.913340]        pty_write+0xc3/0xf0
[ 1972.913341]        n_tty_write+0x85e/0xda0
[ 1972.913342]        tty_write+0x410/0x740
[ 1972.913343]        __vfs_write+0xe4/0x630
[ 1972.913345]        vfs_write+0x17f/0x4d0
[ 1972.913346]        SyS_write+0xf2/0x210
[ 1972.913347]        do_syscall_64+0x1d5/0x640
[ 1972.913349]        entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1972.913349] 
[ 1972.913351] other info that might help us debug this:
[ 1972.913351] 
[ 1972.913352] Chain exists of:
[ 1972.913353]   console_owner --> &port_lock_key --> &(&port->lock)->rlock
[ 1972.913358] 
[ 1972.913360]  Possible unsafe locking scenario:
[ 1972.913360] 
[ 1972.913362]        CPU0                    CPU1
[ 1972.913363]        ----                    ----
[ 1972.913364]   lock(&(&port->lock)->rlock);
[ 1972.913367]                                lock(&port_lock_key);
[ 1972.913370]                                lock(&(&port->lock)->rlock);
[ 1972.913372]   lock(console_owner);
[ 1972.913374] 
[ 1972.913375]  *** DEADLOCK ***
[ 1972.913376] 
[ 1972.913377] 6 locks held by syz-executor.4/19346:
[ 1972.913378]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff83558a22>] tty_ldisc_ref_wait+0x22/0x80
[ 1972.913383]  #1:  (&tty->atomic_write_lock){+.+.}, at: [<ffffffff8354169d>] tty_write+0x22d/0x740
[ 1972.913387]  #2:  (&tty->termios_rwsem){++++}, at: [<ffffffff8354c8da>] n_tty_write+0x18a/0xda0
[ 1972.913392]  #3:  (&ldata->output_lock){+.+.}, at: [<ffffffff8354cf7b>] n_tty_write+0x82b/0xda0
[ 1972.913396]  #4:  (&(&port->lock)->rlock){-.-.}, at: [<ffffffff8355c5ab>] tty_insert_flip_string_and_push_buffer+0x2b/0x160
[ 1972.913401]  #5:  (console_lock){+.+.}, at: [<ffffffff81443128>] vprintk_func+0x58/0x160
[ 1972.913405] 
[ 1972.913406] stack backtrace:
[ 1972.913409] CPU: 0 PID: 19346 Comm: syz-executor.4 Not tainted 4.14.293-syzkaller #0
[ 1972.913411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 1972.913412] Call Trace:
[ 1972.913413]  dump_stack+0x1b2/0x281
[ 1972.913415]  print_circular_bug.constprop.0.cold+0x2d7/0x41e
[ 1972.913416]  __lock_acquire+0x2e0e/0x3f20
[ 1972.913417]  ? trace_hardirqs_on+0x10/0x10
[ 1972.913418]  ? snprintf+0xd0/0xd0
[ 1972.913420]  ? console_unlock+0x34a/0xf20
[ 1972.913421]  lock_acquire+0x170/0x3f0
[ 1972.913422]  ? console_unlock+0x307/0xf20
[ 1972.913423]  console_unlock+0x36f/0xf20
[ 1972.913425]  ? console_unlock+0x307/0xf20
[ 1972.913426]  vprintk_emit+0x224/0x620
[ 1972.913427]  vprintk_func+0x58/0x160
[ 1972.913428]  printk+0x9e/0xbc
[ 1972.913429]  ? log_store.cold+0x16/0x16
[ 1972.913430]  ? __lock_acquire+0x5fc/0x3f20
[ 1972.913432]  ? ___ratelimit+0x2b5/0x510
[ 1972.913433]  should_fail.cold+0xdf/0x149
[ 1972.913434]  should_failslab+0xd6/0x130
[ 1972.913435]  __kmalloc+0x6d/0x400
[ 1972.913436]  ? tty_buffer_alloc+0xc0/0x270
[ 1972.913438]  tty_buffer_alloc+0xc0/0x270
[ 1972.913439]  __tty_buffer_request_room+0x12c/0x290
[ 1972.913441]  tty_insert_flip_string_fixed_flag+0x8b/0x210
[ 1972.913442]  tty_insert_flip_string_and_push_buffer+0x3e/0x160
[ 1972.913443]  pty_write+0xc3/0xf0
[ 1972.913445]  n_tty_write+0x85e/0xda0
[ 1972.913446]  ? n_tty_open+0x160/0x160
[ 1972.913447]  ? do_wait_intr_irq+0x270/0x270
[ 1972.913448]  ? __might_fault+0x177/0x1b0
[ 1972.913449]  tty_write+0x410/0x740
[ 1972.913451]  ? n_tty_open+0x160/0x160
[ 1972.913452]  __vfs_write+0xe4/0x630
[ 1972.913453]  ? tty_compat_ioctl+0x240/0x240
[ 1972.913454]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1972.913456]  ? kernel_read+0x110/0x110
[ 1972.913457]  ? common_file_perm+0x3ee/0x580
[ 1972.913458]  ? security_file_permission+0x82/0x1e0
[ 1972.913460]  ? rw_verify_area+0xe1/0x2a0
[ 1972.913461]  vfs_write+0x17f/0x4d0
[ 1972.913462]  SyS_write+0xf2/0x210
[ 1972.913463]  ? SyS_read+0x210/0x210
[ 1972.913464]  ? __do_page_fault+0x159/0xad0
[ 1972.913465]  ? do_syscall_64+0x4c/0x640
[ 1972.913467]  ? SyS_read+0x210/0x210
[ 1972.913468]  do_syscall_64+0x1d5/0x640
[ 1972.913469]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1972.913470] RIP: 0033:0x7f3bfb73f409
[ 1972.913472] RSP: 002b:00007f3bfa0b4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1972.913475] RAX: ffffffffffffffda RBX: 00007f3bfb851f80 RCX: 00007f3bfb73f409
00:33:11 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff)
ioctl$TIOCSIG(r0, 0x40045436, 0x27)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r2 = socket(0x29, 0x5, 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000080))
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0))

00:33:11 executing program 5:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x68c241, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xf67, 0x5a55, 0x200})
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000140)={0x1, 0x3, 0x4, 0x1, 0x3, {0x0, 0x2710}, {0x3, 0x0, 0x5, 0xa6, 0x20, 0xba, "d41469af"}, 0x1000, 0x4, {}, 0x4, 0x0, <r4=>0xffffffffffffffff})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x101080, 0x0)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0)
r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0)
r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x2, 0xf9, 0x4, 0x8}, {0x73a, 0x3, 0x7, 0xc87}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000002c0)={<r10=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000280)={r10, 0x3, r4, 0x1f, 0x80000})

00:33:11 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x21c6, 0x401, 0xfffffffa, 0x800, 0x6, "dd93f7b3ec1d60aca71180f1962776a0681deb", 0x7, 0x2})
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))

00:33:11 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x83000000)

00:33:11 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mbind(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x1, 0x29, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mbind(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x1, 0x29, 0x0) (async)

00:33:11 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x1)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:11 executing program 5:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x68c241, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xf67, 0x5a55, 0x200})
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000140)={0x1, 0x3, 0x4, 0x1, 0x3, {0x0, 0x2710}, {0x3, 0x0, 0x5, 0xa6, 0x20, 0xba, "d41469af"}, 0x1000, 0x4, {}, 0x4, 0x0, <r4=>0xffffffffffffffff})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x101080, 0x0)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0)
r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0)
r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x2, 0xf9, 0x4, 0x8}, {0x73a, 0x3, 0x7, 0xc87}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000002c0)={<r10=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000280)={r10, 0x3, r4, 0x1f, 0x80000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) (async)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x68c241, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xf67, 0x5a55, 0x200}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000140)={0x1, 0x3, 0x4, 0x1, 0x3, {0x0, 0x2710}, {0x3, 0x0, 0x5, 0xa6, 0x20, 0xba, "d41469af"}, 0x1000, 0x4, {}, 0x4}) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x101080, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x2, 0xf9, 0x4, 0x8}, {0x73a, 0x3, 0x7, 0xc87}]}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000002c0)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000280)={r10, 0x3, r4, 0x1f, 0x80000}) (async)

00:33:11 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff) (async)
ioctl$TIOCSIG(r0, 0x40045436, 0x27) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r2 = socket(0x29, 0x5, 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) (async)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000080))
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0))

[ 1972.913477] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003
[ 1972.913479] RBP: 00007f3bfa0b41d0 R08: 0000000000000000 R09: 0000000000000000
[ 1972.913481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1972.913483] R13: 00007ffd34183faf R14: 00007f3bfa0b4300 R15: 0000000000022000
00:33:11 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x1)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x1) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)

00:33:11 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x21c6, 0x401, 0xfffffffa, 0x800, 0x6, "dd93f7b3ec1d60aca71180f1962776a0681deb", 0x7, 0x2})
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))

00:33:11 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x83000000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
mmap$snddsp_control(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x83000000) (async)

00:33:11 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mbind(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x1, 0x29, 0x0)

00:33:11 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff)
ioctl$TIOCSIG(r0, 0x40045436, 0x27)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r2 = socket(0x29, 0x5, 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000080))
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0))
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff) (async)
ioctl$TIOCSIG(r0, 0x40045436, 0x27) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (async)
socket(0x29, 0x5, 0x8) (async)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)) (async)

00:33:11 executing program 5:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x68c241, 0x0) (async, rerun: 64)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xf67, 0x5a55, 0x200})
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000140)={0x1, 0x3, 0x4, 0x1, 0x3, {0x0, 0x2710}, {0x3, 0x0, 0x5, 0xa6, 0x20, 0xba, "d41469af"}, 0x1000, 0x4, {}, 0x4, 0x0, <r4=>0xffffffffffffffff}) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x101080, 0x0) (async)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0)
r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0)
r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x2, 0xf9, 0x4, 0x8}, {0x73a, 0x3, 0x7, 0xc87}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000002c0)={<r10=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000280)={r10, 0x3, r4, 0x1f, 0x80000})

00:33:11 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x1)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:11 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000007000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000000000/0x1000)=nil, 0x1000})

00:33:11 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_WAITACTIVE(r0, 0x5607)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x33cf42, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x6, 0x300, 0x20, {0x0, 0x2710}, {r4, r5/1000+60000}, {0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x2a, 0x2, 0x0, 0x0, "735f3d5523d4b2cd6ec767d386f4759dc89680a364af3ff00e34892c8a360e4277f611e383ba2a9d76a30b11a2e3a6647c9f7786e0e99101714112dfc0948a7f"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40090)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1)

00:33:11 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x21c6, 0x401, 0xfffffffa, 0x800, 0x6, "dd93f7b3ec1d60aca71180f1962776a0681deb", 0x7, 0x2})
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x21c6, 0x401, 0xfffffffa, 0x800, 0x6, "dd93f7b3ec1d60aca71180f1962776a0681deb", 0x7, 0x2}) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) (async)

00:33:11 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
mmap$snddsp_control(&(0x7f0000381000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x83000000)

00:33:11 executing program 3:
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x4, 0x9, 0x3)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x4000)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000005000/0x1000)=nil, 0x1000}})

00:33:11 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_WAITACTIVE(r0, 0x5607)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x33cf42, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
clock_gettime(0x0, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x6, 0x300, 0x20, {0x0, 0x2710}, {r4, r5/1000+60000}, {0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x2a, 0x2, 0x0, 0x0, "735f3d5523d4b2cd6ec767d386f4759dc89680a364af3ff00e34892c8a360e4277f611e383ba2a9d76a30b11a2e3a6647c9f7786e0e99101714112dfc0948a7f"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40090)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1)

00:33:11 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000007000/0x4000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000000000/0x1000)=nil, 0x1000}) (rerun: 32)

00:33:11 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
munlock(&(0x7f0000380000/0x4000)=nil, 0x4000)

00:33:11 executing program 5:
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0xe0, 0x101, 0x5)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00003ff000/0x1000)=nil, 0x1000}})
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000127000/0x4000)=nil, 0x4000})

00:33:11 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x1e, 0x17, 0x1d0, &(0x7f0000000040)="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"})

00:33:11 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000007000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000000000/0x1000)=nil, 0x1000})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000007000/0x4000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000000000/0x1000)=nil, 0x1000}) (async)

00:33:11 executing program 3:
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x4, 0x9, 0x3)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x4000)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000005000/0x1000)=nil, 0x1000}})
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mbind(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x4, 0x9, 0x3) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) (async)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async)
shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x4000) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000005000/0x1000)=nil, 0x1000}}) (async)

00:33:11 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
munlock(&(0x7f0000380000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
munlock(&(0x7f0000380000/0x4000)=nil, 0x4000) (async)

00:33:11 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_WAITACTIVE(r0, 0x5607) (async, rerun: 32)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x33cf42, 0x0) (async, rerun: 32)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (rerun: 32)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x6, 0x300, 0x20, {0x0, 0x2710}, {r4, r5/1000+60000}, {0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x2a, 0x2, 0x0, 0x0, "735f3d5523d4b2cd6ec767d386f4759dc89680a364af3ff00e34892c8a360e4277f611e383ba2a9d76a30b11a2e3a6647c9f7786e0e99101714112dfc0948a7f"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40090)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1)

00:33:11 executing program 2:
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil)

00:33:11 executing program 3:
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 64)
mbind(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x4, 0x9, 0x3) (async, rerun: 64)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 64)
r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) (rerun: 64)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x4000) (async, rerun: 32)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000005000/0x1000)=nil, 0x1000}}) (rerun: 32)

00:33:11 executing program 5:
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0xe0, 0x101, 0x5) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00003ff000/0x1000)=nil, 0x1000}})
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000127000/0x4000)=nil, 0x4000})

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
munlock(&(0x7f0000380000/0x4000)=nil, 0x4000)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x1e, 0x17, 0x1d0, &(0x7f0000000040)="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"})

00:33:12 executing program 2:
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil) (async)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x1e, 0x17, 0x1d0, &(0x7f0000000040)="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"})
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x1e, 0x17, 0x1d0, &(0x7f0000000040)="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"}) (async)

00:33:12 executing program 5:
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0xe0, 0x101, 0x5)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00003ff000/0x1000)=nil, 0x1000}})
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000127000/0x4000)=nil, 0x4000})
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0xe0, 0x101, 0x5) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00003ff000/0x1000)=nil, 0x1000}}) (async)
userfaultfd(0x80801) (async)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000127000/0x4000)=nil, 0x4000}) (async)

00:33:12 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1411, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x9)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x1000)=nil, 0x1000}, 0x61e78760c7b40b8f})

00:33:12 executing program 2:
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil) (async)

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x9)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x1000)=nil, 0x1000}, 0x61e78760c7b40b8f})

00:33:12 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1411, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x14) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

00:33:12 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000000), 0xff, 0x80040)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x4, 0x8000000000000001, 0x1, 0x8})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x80000000, 0x0, 0x1, 0x7})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:12 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 5:
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080)=0x7, 0x4, 0x5)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1})
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
mmap$binder(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x8b73)
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x32f7, 0x2)

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x9) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000381000/0x1000)=nil, 0x1000}, 0x61e78760c7b40b8f})

00:33:12 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1411, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x14) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1)

00:33:12 executing program 5:
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080)=0x7, 0x4, 0x5)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1})
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async)
mmap$binder(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x8b73)
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x32f7, 0x2)

00:33:12 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x10)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:12 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000000), 0xff, 0x80040)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x4, 0x8000000000000001, 0x1, 0x8}) (async, rerun: 32)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x80000000, 0x0, 0x1, 0x7}) (async, rerun: 32)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (rerun: 32)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

00:33:12 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x10)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:12 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$snddsp_control(&(0x7f0000008000/0x2000)=nil, 0x1000, 0x1000004, 0x4000010, 0xffffffffffffffff, 0x83000000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000005000/0x2000)=nil)

00:33:12 executing program 5:
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080)=0x7, 0x4, 0x5)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) (async)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async)
mmap$binder(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x8b73) (async)
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x32f7, 0x2)

00:33:12 executing program 4:
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000000c0))
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x7ff, 0x1, 0x4f5, 0xffffffff, 0x0, "219320b7f2e2c7298b1e6fb9787ed467a0e427", 0x2c74, 0x7fff})

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32)
mmap$snddsp_control(&(0x7f0000008000/0x2000)=nil, 0x1000, 0x1000004, 0x4000010, 0xffffffffffffffff, 0x83000000) (async, rerun: 32)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000005000/0x2000)=nil)

00:33:12 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000222000/0x1000)=nil, 0x200, 0x5, 0x8})
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x9)
munlock(&(0x7f0000222000/0x4000)=nil, 0x4000)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000000), 0xff, 0x80040)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x4, 0x8000000000000001, 0x1, 0x8})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x80000000, 0x0, 0x1, 0x7})
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
syz_open_dev$midi(&(0x7f0000000000), 0xff, 0x80040) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x4, 0x8000000000000001, 0x1, 0x8}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x80000000, 0x0, 0x1, 0x7}) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)

00:33:12 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:12 executing program 4:
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000000c0))
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x7ff, 0x1, 0x4f5, 0xffffffff, 0x0, "219320b7f2e2c7298b1e6fb9787ed467a0e427", 0x2c74, 0x7fff})
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000000c0)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) (async)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x7ff, 0x1, 0x4f5, 0xffffffff, 0x0, "219320b7f2e2c7298b1e6fb9787ed467a0e427", 0x2c74, 0x7fff}) (async)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:12 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000222000/0x1000)=nil, 0x200, 0x5, 0x8})
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x9)
munlock(&(0x7f0000222000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000222000/0x1000)=nil, 0x200, 0x5, 0x8}) (async)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x9) (async)
munlock(&(0x7f0000222000/0x4000)=nil, 0x4000) (async)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$snddsp_control(&(0x7f0000008000/0x2000)=nil, 0x1000, 0x1000004, 0x4000010, 0xffffffffffffffff, 0x83000000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000005000/0x2000)=nil)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x80010, 0xffffffffffffffff, 0x22c22000)
shmget(0x1, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000})
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
shmat(0x0, &(0x7f0000002000/0x2000)=nil, 0x7000)

00:33:12 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x26)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:12 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000222000/0x1000)=nil, 0x200, 0x5, 0x8}) (async)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x9) (async)
munlock(&(0x7f0000222000/0x4000)=nil, 0x4000)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x80010, 0xffffffffffffffff, 0x22c22000)
shmget(0x1, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) (async)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) (async)
shmat(0x0, &(0x7f0000002000/0x2000)=nil, 0x7000)

00:33:12 executing program 4:
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000000c0)) (async)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x7ff, 0x1, 0x4f5, 0xffffffff, 0x0, "219320b7f2e2c7298b1e6fb9787ed467a0e427", 0x2c74, 0x7fff})

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 3:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x2010, 0xffffffffffffffff, 0x0)

00:33:12 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) (async)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x26)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:12 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000222000/0x12000)=nil, 0x12000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/135, 0x87, 0x1, &(0x7f0000000100)=""/94, 0x5e}, &(0x7f00000001c0)=0x40)

00:33:12 executing program 3:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x2010, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x2010, 0xffffffffffffffff, 0x0) (async)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
getgid()
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x80010, 0xffffffffffffffff, 0x22c22000)
shmget(0x1, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000})
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
shmat(0x0, &(0x7f0000002000/0x2000)=nil, 0x7000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x80010, 0xffffffffffffffff, 0x22c22000) (async)
shmget(0x1, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) (async)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) (async)
shmat(0x0, &(0x7f0000002000/0x2000)=nil, 0x7000) (async)

00:33:12 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)
socket$inet_udp(0x2, 0x2, 0x0)

00:33:12 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) (async)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x26) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:12 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000222000/0x12000)=nil, 0x12000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/135, 0x87, 0x1, &(0x7f0000000100)=""/94, 0x5e}, &(0x7f00000001c0)=0x40)

00:33:12 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) (async)
socket$inet_udp(0x2, 0x2, 0x0)

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0x4f000)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x3000)=nil, 0x3000})
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000380000/0x1000)=nil, 0x1000})
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r1, 0x5, 0x80000})
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xa080, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3)

00:33:12 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000222000/0x12000)=nil, 0x12000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/135, 0x87, 0x1, &(0x7f0000000100)=""/94, 0x5e}, &(0x7f00000001c0)=0x40)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000222000/0x12000)=nil, 0x12000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/135, 0x87, 0x1, &(0x7f0000000100)=""/94, 0x5e}, &(0x7f00000001c0)=0x40) (async)

00:33:12 executing program 2:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000f1401002dbd700000000c00450069625f737270740008000300040000000800030001000000080003000500"/60], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40044)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
getgid()
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
getgid() (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:12 executing program 3:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x2010, 0xffffffffffffffff, 0x0)

00:33:12 executing program 4:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)
socket$inet_udp(0x2, 0x2, 0x0)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000008000/0x11000)=nil, 0x11000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/198, 0xc6, 0x1, &(0x7f0000000100)=""/39, 0x27}, &(0x7f0000000180)=0x40)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
getgid()
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0x4f000) (async)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x3000)=nil, 0x3000}) (async)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000380000/0x1000)=nil, 0x1000}) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r1, 0x5, 0x80000}) (async)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xa080, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3)

00:33:12 executing program 2:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000f1401002dbd700000000c00450069625f737270740008000300040000000800030001000000080003000500"/60], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40044)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000f1401002dbd700000000c00450069625f737270740008000300040000000800030001000000080003000500"/60], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40044) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)

00:33:12 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)

00:33:12 executing program 5:
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000008000/0x11000)=nil, 0x11000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/198, 0xc6, 0x1, &(0x7f0000000100)=""/39, 0x27}, &(0x7f0000000180)=0x40) (async, rerun: 32)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (rerun: 32)

00:33:12 executing program 5:
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)

00:33:12 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0x4f000)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x3000)=nil, 0x3000})
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000380000/0x1000)=nil, 0x1000})
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r1, 0x5, 0x80000})
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xa080, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0) (async)
mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0x4f000) (async)
userfaultfd(0x0) (async)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000380000/0x3000)=nil, 0x3000}) (async)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000380000/0x1000)=nil, 0x1000}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r1, 0x5, 0x80000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xa080, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) (async)

00:33:12 executing program 2:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000f1401002dbd700000000c00450069625f737270740008000300040000000800030001000000080003000500"/60], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40044) (async, rerun: 64)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (rerun: 64)

00:33:12 executing program 5:
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000008000/0x11000)=nil, 0x11000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/198, 0xc6, 0x1, &(0x7f0000000100)=""/39, 0x27}, &(0x7f0000000180)=0x40) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:12 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x1)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xdcdf0e99ca1c5128)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x2)

00:33:12 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000380000/0x3000)=nil, 0x3000}, 0x3})
mbind(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x32000, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000380000/0x2000)=nil, 0x2000, &(0x7f0000000040)='\x00')

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil)

00:33:12 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2c000, 0x0)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14)
r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x6a, 0xa000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x1, 0x4})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x24, @none={0x0, 0x1ffff}}, 0x14, &(0x7f0000000300)={&(0x7f0000000200)="5935d9a4bbab26334cb76a7f75de61c181d7330484342db4756964fadaa13d0bcb207804e425a8d64484f78a172b284909b32e96c3b8e1ab3719c8c2867cb560e360f61ef25bd23fe422515ee661f814e0679fa5c55e462cd6844713e16ba7f8b2ed4ce042c67ee6f3a026b00be49af60b22b9a68525f558cc8c34e82a509dabbf5dc18e5b0413af4111c7d908974b84c2cb230f410f28801d3090dd3e0ce095fcd4661cb93580e28fd6841ce8eac881a57fe95a864b8d15962f371d1b18440f3f824548", 0xc4}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000)

00:33:12 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x2)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x2) (async)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xdcdf0e99ca1c5128)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) (async)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4)

00:33:12 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000380000/0x3000)=nil, 0x3000}, 0x3}) (async)
mbind(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x32000, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000380000/0x2000)=nil, 0x2000, &(0x7f0000000040)='\x00')

00:33:12 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2c000, 0x0)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) (async)
r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x6a, 0xa000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x1, 0x4})
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x24, @none={0x0, 0x1ffff}}, 0x14, &(0x7f0000000300)={&(0x7f0000000200)="5935d9a4bbab26334cb76a7f75de61c181d7330484342db4756964fadaa13d0bcb207804e425a8d64484f78a172b284909b32e96c3b8e1ab3719c8c2867cb560e360f61ef25bd23fe422515ee661f814e0679fa5c55e462cd6844713e16ba7f8b2ed4ce042c67ee6f3a026b00be49af60b22b9a68525f558cc8c34e82a509dabbf5dc18e5b0413af4111c7d908974b84c2cb230f410f28801d3090dd3e0ce095fcd4661cb93580e28fd6841ce8eac881a57fe95a864b8d15962f371d1b18440f3f824548", 0xc4}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xdcdf0e99ca1c5128)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xdcdf0e99ca1c5128) (async)

00:33:12 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x2)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x2) (async)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async)

00:33:12 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2c000, 0x0)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) (async)
r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x6a, 0xa000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x1, 0x4}) (async)
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async, rerun: 32)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x24, @none={0x0, 0x1ffff}}, 0x14, &(0x7f0000000300)={&(0x7f0000000200)="5935d9a4bbab26334cb76a7f75de61c181d7330484342db4756964fadaa13d0bcb207804e425a8d64484f78a172b284909b32e96c3b8e1ab3719c8c2867cb560e360f61ef25bd23fe422515ee661f814e0679fa5c55e462cd6844713e16ba7f8b2ed4ce042c67ee6f3a026b00be49af60b22b9a68525f558cc8c34e82a509dabbf5dc18e5b0413af4111c7d908974b84c2cb230f410f28801d3090dd3e0ce095fcd4661cb93580e28fd6841ce8eac881a57fe95a864b8d15962f371d1b18440f3f824548", 0xc4}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) (rerun: 32)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, r0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:12 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000380000/0x3000)=nil, 0x3000}, 0x3})
mbind(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x32000, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000380000/0x2000)=nil, 0x2000, &(0x7f0000000040)='\x00')
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000380000/0x3000)=nil, 0x3000}, 0x3}) (async)
mbind(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x32000, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000380000/0x2000)=nil, 0x2000, &(0x7f0000000040)='\x00') (async)

00:33:12 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1)

00:33:12 executing program 5:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
mbind(&(0x7f0000221000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x1, 0xffffffbffffffff8, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00f1ef0000021402e92bbd3eff1037dfbd0011000073797a1b00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040c}, 0x800)
remap_file_pages(&(0x7f0000221000/0x400000)=nil, 0x400000, 0x6, 0x0, 0x4000000)
mmap$fb(&(0x7f00005d8000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r0, 0xd2000)
mremap(&(0x7f0000221000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000222000/0x3000)=nil)
mbind(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x1, 0x40, 0x2)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async, rerun: 64)
r0 = pkey_alloc(0x0, 0x0) (rerun: 64)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, r0) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 64)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/46)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x81)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, r0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=""/161, 0xa1}, &(0x7f0000001180)=0x40)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0xd4000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001200), 0x210400, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000001340)={&(0x7f0000001240), 0x10, &(0x7f0000001300)={&(0x7f0000001280)={0x3, 0x406, 0x8000, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "c117194ea7f6600b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000011c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2})
mmap$dsp(&(0x7f000037e000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x0)

00:33:12 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$TIOCCONS(r0, 0x541d) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1)

00:33:12 executing program 5:
socketpair(0x0, 0x0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async)
mbind(&(0x7f0000221000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x1, 0xffffffbffffffff8, 0x0) (async)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00f1ef0000021402e92bbd3eff1037dfbd0011000073797a1b00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040c}, 0x800)
remap_file_pages(&(0x7f0000221000/0x400000)=nil, 0x400000, 0x6, 0x0, 0x4000000) (async)
mmap$fb(&(0x7f00005d8000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r0, 0xd2000) (async)
mremap(&(0x7f0000221000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000222000/0x3000)=nil)
mbind(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x1, 0x40, 0x2)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000007000/0x2000)=nil, 0x7fff, 0x1, 0xdc})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff4000/0x9000)=nil, 0x9000})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=""/161, 0xa1}, &(0x7f0000001180)=0x40)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0xd4000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001200), 0x210400, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000001340)={&(0x7f0000001240), 0x10, &(0x7f0000001300)={&(0x7f0000001280)={0x3, 0x406, 0x8000, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "c117194ea7f6600b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000011c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2})
mmap$dsp(&(0x7f000037e000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=""/161, 0xa1}, &(0x7f0000001180)=0x40) (async)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0xd4000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001200), 0x210400, 0x0) (async)
sendmsg$can_bcm(r2, &(0x7f0000001340)={&(0x7f0000001240), 0x10, &(0x7f0000001300)={&(0x7f0000001280)={0x3, 0x406, 0x8000, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "c117194ea7f6600b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000011c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) (async)
mmap$dsp(&(0x7f000037e000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x0) (async)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/46) (async)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x81)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x262ac1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
openat$cgroup_int(r0, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0)

00:33:12 executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$TIOCCONS(r0, 0x541d) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000007000/0x2000)=nil, 0x7fff, 0x1, 0xdc}) (async, rerun: 32)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff4000/0x9000)=nil, 0x9000})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:12 executing program 5:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
mbind(&(0x7f0000221000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x1, 0xffffffbffffffff8, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00f1ef0000021402e92bbd3eff1037dfbd0011000073797a1b00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040c}, 0x800)
remap_file_pages(&(0x7f0000221000/0x400000)=nil, 0x400000, 0x6, 0x0, 0x4000000)
mmap$fb(&(0x7f00005d8000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r0, 0xd2000)
mremap(&(0x7f0000221000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000222000/0x3000)=nil)
mbind(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x1, 0x40, 0x2)
socketpair(0x0, 0x0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async)
mbind(&(0x7f0000221000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x1, 0xffffffbffffffff8, 0x0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00f1ef0000021402e92bbd3eff1037dfbd0011000073797a1b00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040c}, 0x800) (async)
remap_file_pages(&(0x7f0000221000/0x400000)=nil, 0x400000, 0x6, 0x0, 0x4000000) (async)
mmap$fb(&(0x7f00005d8000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r0, 0xd2000) (async)
mremap(&(0x7f0000221000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000222000/0x3000)=nil) (async)
mbind(&(0x7f0000221000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x1, 0x40, 0x2) (async)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x262ac1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
openat$cgroup_int(r0, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/46)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x81)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/46) (async)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x81) (async)

00:33:12 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x125400, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)

00:33:12 executing program 1:
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=""/161, 0xa1}, &(0x7f0000001180)=0x40)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0xd4000)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001200), 0x210400, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000001340)={&(0x7f0000001240), 0x10, &(0x7f0000001300)={&(0x7f0000001280)={0x3, 0x406, 0x8000, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "c117194ea7f6600b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000011c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2})
mmap$dsp(&(0x7f000037e000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x0)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001140)={&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=""/161, 0xa1}, &(0x7f0000001180)=0x40) (async)
mmap$fb(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0xd4000) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001200), 0x210400, 0x0) (async)
sendmsg$can_bcm(r2, &(0x7f0000001340)={&(0x7f0000001240), 0x10, &(0x7f0000001300)={&(0x7f0000001280)={0x3, 0x406, 0x8000, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "c117194ea7f6600b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000011c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) (async)
mmap$dsp(&(0x7f000037e000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x0) (async)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000007000/0x2000)=nil, 0x7fff, 0x1, 0xdc})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff4000/0x9000)=nil, 0x9000})
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x262ac1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
openat$cgroup_int(r0, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x262ac1, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
openat$cgroup_int(r0, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0) (async)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mmap$fb(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000012, 0x4000010, 0xffffffffffffffff, 0xc000)

00:33:12 executing program 5:
mbind(&(0x7f0000221000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x7ff, 0x2000000000101, 0x0)

00:33:12 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x125400, 0x0) (async, rerun: 64)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (rerun: 64)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000006000/0x4000)=nil)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
mmap$fb(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000012, 0x4000010, 0xffffffffffffffff, 0xc000)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mmap$fb(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000012, 0x4000010, 0xffffffffffffffff, 0xc000) (async)

00:33:12 executing program 0:
mmap$snddsp_status(&(0x7f0000fed000/0x11000)=nil, 0x1000, 0x8, 0x191053, 0xffffffffffffffff, 0x82000000)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 5:
mbind(&(0x7f0000221000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x7ff, 0x2000000000101, 0x0)

00:33:12 executing program 1:
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0x81, 0xa)

00:33:12 executing program 2:
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)
mmap$fb(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000012, 0x4000010, 0xffffffffffffffff, 0xc000)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000006000/0x4000)=nil)

00:33:12 executing program 0:
mmap$snddsp_status(&(0x7f0000fed000/0x11000)=nil, 0x1000, 0x8, 0x191053, 0xffffffffffffffff, 0x82000000) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:12 executing program 5:
mbind(&(0x7f0000221000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x7ff, 0x2000000000101, 0x0)
mbind(&(0x7f0000221000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x7ff, 0x2000000000101, 0x0) (async)

00:33:12 executing program 2:
prctl$PR_PAC_RESET_KEYS(0x36, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:12 executing program 1:
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0x81, 0xa)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0x81, 0xa) (async)

00:33:12 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x125400, 0x0) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)

00:33:12 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000006000/0x4000)=nil)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000006000/0x4000)=nil) (async)

00:33:12 executing program 1:
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0x81, 0xa)

00:33:12 executing program 0:
mmap$snddsp_status(&(0x7f0000fed000/0x11000)=nil, 0x1000, 0x8, 0x191053, 0xffffffffffffffff, 0x82000000)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
mmap$snddsp_status(&(0x7f0000fed000/0x11000)=nil, 0x1000, 0x8, 0x191053, 0xffffffffffffffff, 0x82000000) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:12 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0)
socketpair(0x28, 0x0, 0x627, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$can_bcm(r1, &(0x7f0000001440)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, &(0x7f00000013c0)=""/67, 0x43}, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4)
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x8001, 0x102, 0x6)
shmat(0xffffffffffffffff, &(0x7f0000223000/0x4000)=nil, 0x0)

00:33:12 executing program 2:
prctl$PR_PAC_RESET_KEYS(0x36, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
prctl$PR_PAC_RESET_KEYS(0x36, 0x0) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)

00:33:12 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00'})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x10, 0x5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan1\x00'})
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)
syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x200000)

00:33:12 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x14)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)

00:33:13 executing program 4:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={r0, 0x4, 0x7})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2a4a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000040)='1', 0x1)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1)

00:33:13 executing program 2:
prctl$PR_PAC_RESET_KEYS(0x36, 0x0)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)
prctl$PR_PAC_RESET_KEYS(0x36, 0x0) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (async)

00:33:13 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0)
socketpair(0x28, 0x0, 0x627, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$can_bcm(r1, &(0x7f0000001440)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, &(0x7f00000013c0)=""/67, 0x43}, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) (async)
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x8001, 0x102, 0x6) (async)
shmat(0xffffffffffffffff, &(0x7f0000223000/0x4000)=nil, 0x0)

00:33:13 executing program 3:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/150)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000005)

00:33:13 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x14)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)

00:33:13 executing program 4:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={r0, 0x4, 0x7}) (async)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2a4a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000040)='1', 0x1) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1)

00:33:13 executing program 2:
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:33:13 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x14) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)

00:33:13 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x10, 0x5, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan1\x00'})
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)
syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x200000)

00:33:13 executing program 3:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/150)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000005)
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/150) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async)
mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000005) (async)

00:33:13 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0)
socketpair(0x28, 0x0, 0x627, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$can_bcm(r1, &(0x7f0000001440)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, &(0x7f00000013c0)=""/67, 0x43}, 0x0) (async)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) (async)
mbind(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x8001, 0x102, 0x6) (async, rerun: 64)
shmat(0xffffffffffffffff, &(0x7f0000223000/0x4000)=nil, 0x0) (rerun: 64)

00:33:13 executing program 4:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={r0, 0x4, 0x7})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2a4a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000040)='1', 0x1)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={r0, 0x4, 0x7}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2a4a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000040)='1', 0x1) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) (async)

00:33:13 executing program 2:
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:33:13 executing program 0:
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "0fe7221b50f2dd4c", "13b50e890e999a7bd4efe65aa38cd1cb", "eca027c4", "a813b49401b25f6b"}, 0x28)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8800)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:13 executing program 4:
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x4)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x2)

00:33:13 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
connect$802154_dgram(r0, &(0x7f0000000140)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x1, 0xfffffffffffffff9, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x7fff, 0x7, 0x8000, 0x8, 0xb, "f722fae4c527d5161783a232d76ffb26ae4f08", 0x8, 0x7})

00:33:13 executing program 3:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/150)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000005)
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/150) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async)
mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000005) (async)

00:33:13 executing program 2:
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)

00:33:13 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
connect$802154_dgram(r0, &(0x7f0000000140)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) (async)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x1, 0xfffffffffffffff9, 0x0) (async)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x7fff, 0x7, 0x8000, 0x8, 0xb, "f722fae4c527d5161783a232d76ffb26ae4f08", 0x8, 0x7})

00:33:13 executing program 0:
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "0fe7221b50f2dd4c", "13b50e890e999a7bd4efe65aa38cd1cb", "eca027c4", "a813b49401b25f6b"}, 0x28) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8800) (async, rerun: 32)
syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:13 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00'})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x10, 0x5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)
syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x200000)

00:33:13 executing program 4:
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x4) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) (async)
syz_open_dev$tty1(0xc, 0x4, 0x2)

00:33:13 executing program 2:
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil)

00:33:13 executing program 3:
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:13 executing program 0:
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "0fe7221b50f2dd4c", "13b50e890e999a7bd4efe65aa38cd1cb", "eca027c4", "a813b49401b25f6b"}, 0x28)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8800)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x0)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "0fe7221b50f2dd4c", "13b50e890e999a7bd4efe65aa38cd1cb", "eca027c4", "a813b49401b25f6b"}, 0x28) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8800) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:13 executing program 5:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
connect$802154_dgram(r0, &(0x7f0000000140)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) (async)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x1, 0xfffffffffffffff9, 0x0) (async)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x7fff, 0x7, 0x8000, 0x8, 0xb, "f722fae4c527d5161783a232d76ffb26ae4f08", 0x8, 0x7})

00:33:13 executing program 3:
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async, rerun: 64)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (rerun: 64)

00:33:13 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0)
shmget(0x3, 0x3000, 0x2, &(0x7f0000220000/0x3000)=nil)

00:33:13 executing program 2:
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil)

00:33:13 executing program 1:
socket$can_bcm(0x1d, 0x2, 0x2)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:13 executing program 1:
socket$can_bcm(0x1d, 0x2, 0x2)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:13 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000240))
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x9, "9ea26c0eef1c6fcaff1dda9eb15529bdb34eda9478db328ee8ddfba37410fe31d455c916541431fb733262c5c349df1a3d295e16475c8218d56412958cce353e4d3bdcc66cf39597559929c13a1ffb8c806ae6f2d4f2945222e0f3dc7675d2be000b65adbc919c1d161d2d7b16148815d071af231f0feaa6f03020a4094e7c1a664f7d4c1ca8ab492c658bebde6297bfb81ff28315a67fba1584af6991f0d1b21c689c2bf317ce30fd35732b2247ec3704f7e67b4c8906c646ae3ff7e6fe4bcbf3b520dc5dab0a07c0e6915ef7aa5c57c65f065695b796d1923111d4966adbc65fcecf84c323adb2952b5c45780825001cb77f4c5628ae1f14a5441f400e7167d4ccefeaf6357c1805e45ac9ac5148ccbfdacfb84e29f7d41a87b86b5dca6eaed7bf2ca06e7ba12742f92f869a5ed19524cf92409080b668cdcc9b092043a512d39e9d1c217a5214063c1dc87487b360b1f8bff9699167580187165784f206b510406d1e876b2ff715d2e43bac3d693d54aafcc282787b89edddf2aebcbac407edc0a4b061de5fb0dca1ca415cace7ef04ce1052d7d64e283f4b222533ecae827711132229163bf280de0111630a5f91ecfe0edf5bc37de18a872c88950db49d2d79a1a1310012129cbfc94e267c8bbacd4f5ce487bb98cf65538dcad699a3b57d28ce7cd13947ddc56b620ada1b06ec76d9aeda34da535e010d84f684bc662b"})
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1401, 0x202, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48017}, 0x4)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:13 executing program 4:
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x4) (async)
write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) (async)
syz_open_dev$tty1(0xc, 0x4, 0x2)

00:33:13 executing program 3:
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

00:33:13 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
shmget(0x3, 0x3000, 0x2, &(0x7f0000220000/0x3000)=nil)

00:33:13 executing program 1:
socket$can_bcm(0x1d, 0x2, 0x2) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:13 executing program 2:
mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil)

00:33:13 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "c0afda0d28ead861", "feab2468bf0457dc5f70c4ff9e805e80", "f4efb9ea", "821fca9410d0b3fb"}, 0x28)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:13 executing program 2:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r0=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008005}, 0x2400c040)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:13 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "c0afda0d28ead861", "feab2468bf0457dc5f70c4ff9e805e80", "f4efb9ea", "821fca9410d0b3fb"}, 0x28)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "c0afda0d28ead861", "feab2468bf0457dc5f70c4ff9e805e80", "f4efb9ea", "821fca9410d0b3fb"}, 0x28) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0) (async)

00:33:13 executing program 5:
mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x101, 0x0) (async)
shmget(0x3, 0x3000, 0x2, &(0x7f0000220000/0x3000)=nil)

00:33:13 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000240))
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x9, "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"})
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1401, 0x202, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48017}, 0x4)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000240)) (async)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x9, "9ea26c0eef1c6fcaff1dda9eb15529bdb34eda9478db328ee8ddfba37410fe31d455c916541431fb733262c5c349df1a3d295e16475c8218d56412958cce353e4d3bdcc66cf39597559929c13a1ffb8c806ae6f2d4f2945222e0f3dc7675d2be000b65adbc919c1d161d2d7b16148815d071af231f0feaa6f03020a4094e7c1a664f7d4c1ca8ab492c658bebde6297bfb81ff28315a67fba1584af6991f0d1b21c689c2bf317ce30fd35732b2247ec3704f7e67b4c8906c646ae3ff7e6fe4bcbf3b520dc5dab0a07c0e6915ef7aa5c57c65f065695b796d1923111d4966adbc65fcecf84c323adb2952b5c45780825001cb77f4c5628ae1f14a5441f400e7167d4ccefeaf6357c1805e45ac9ac5148ccbfdacfb84e29f7d41a87b86b5dca6eaed7bf2ca06e7ba12742f92f869a5ed19524cf92409080b668cdcc9b092043a512d39e9d1c217a5214063c1dc87487b360b1f8bff9699167580187165784f206b510406d1e876b2ff715d2e43bac3d693d54aafcc282787b89edddf2aebcbac407edc0a4b061de5fb0dca1ca415cace7ef04ce1052d7d64e283f4b222533ecae827711132229163bf280de0111630a5f91ecfe0edf5bc37de18a872c88950db49d2d79a1a1310012129cbfc94e267c8bbacd4f5ce487bb98cf65538dcad699a3b57d28ce7cd13947ddc56b620ada1b06ec76d9aeda34da535e010d84f684bc662b"}) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1401, 0x202, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48017}, 0x4) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)

00:33:13 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = pkey_alloc(0x0, 0x3)
mbind(&(0x7f0000005000/0x6000)=nil, 0x6000, 0x1, &(0x7f0000000000)=0x1, 0xc7da, 0x4)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0)

00:33:13 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$6lowpan_enable(r0, &(0x7f0000000040)='1', 0x1)

00:33:13 executing program 2:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r0=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008005}, 0x2400c040) (async)
mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

00:33:13 executing program 3:
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
r0 = pkey_alloc(0x0, 0x3)
mbind(&(0x7f0000005000/0x6000)=nil, 0x6000, 0x1, &(0x7f0000000000)=0x1, 0xc7da, 0x4) (async)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0)

00:33:13 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "c0afda0d28ead861", "feab2468bf0457dc5f70c4ff9e805e80", "f4efb9ea", "821fca9410d0b3fb"}, 0x28) (async)
mbind(&(0x7f0000380000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x81, 0x0)

00:33:13 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x220a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000240)) (async)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x9, "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"})
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1401, 0x202, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48017}, 0x4) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

00:33:13 executing program 5:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x20, 0x9, {}, {0x5, 0x0, 0x2, 0x54, 0x5, 0x9, "14575cce"}, 0x13, 0x4, {}, 0x3})
pkey_alloc(0x0, 0x3)
mbind(&(0x7f0000222000/0x