x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r9}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)={0x448, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42a}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x585}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x240180c0}, 0xc044) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r20}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, r20, 0x0, 0x9, 0x9, 0x1ff, 0x1, 0x800, 0xfffffffa, 0xa6ac, 0xfffffff8, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x9, 0x6}) 14:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffbff6, 0x12, r0, 0x0) 14:32:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r3], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, r3}) 14:32:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x80, 0x7d456c36b4149a13, 0x1, 0xff, 0x1f, 0x5, &(0x7f0000000000)="24260d39fdbdb333f0cb5b71c75fd5d65844b0b8264549e836140967cc66c9"}) (async, rerun: 32) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000/0x1000)=nil}) (rerun: 32) read$usbfs(r0, 0x0, 0x11) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x40100) 14:32:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) (async) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r9}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)={0x448, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42a}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x585}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x240180c0}, 0xc044) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r20}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, r20, 0x0, 0x9, 0x9, 0x1ff, 0x1, 0x800, 0xfffffffa, 0xa6ac, 0xfffffff8, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x9, 0x6}) 14:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffdff5, 0x12, r0, 0x0) 14:32:00 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 14:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffdff6, 0x12, r0, 0x0) 14:32:00 executing program 0: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x88001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@bridge_getvlan={0x28, 0x72, 0x300, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x2031, r2, 0x5675e000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc01c64b9, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x1, r6, 0xc0c0c0c0}) 14:32:00 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) read$usbfs(r0, 0x0, 0x0) 14:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffe12c, 0x12, r0, 0x0) 14:32:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) (async) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r9}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)={0x448, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42a}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x585}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x240180c0}, 0xc044) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r20}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, r20, 0x0, 0x9, 0x9, 0x1ff, 0x1, 0x800, 0xfffffffa, 0xa6ac, 0xfffffff8, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x9, 0x6}) 14:32:00 executing program 0: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x88001) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@bridge_getvlan={0x28, 0x72, 0x300, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x2031, r2, 0x5675e000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc01c64b9, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x1, r6, 0xc0c0c0c0}) 14:32:00 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) read$usbfs(r0, 0x0, 0x0) (async) 14:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffff1f, 0x12, r0, 0x0) 14:32:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x248040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0xa, 0x4, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) 14:32:00 executing program 0: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x88001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async, rerun: 32) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@bridge_getvlan={0x28, 0x72, 0x300, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x2031, r2, 0x5675e000) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc01c64b9, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x1, r6, 0xc0c0c0c0}) 14:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffff20, 0x12, r0, 0x0) 14:32:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x40608c, 0x0) read$usbfs(r0, 0x0, 0x11) 14:32:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x248040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0xa, 0x4, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) 14:32:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x40608c, 0x0) read$usbfs(r0, 0x0, 0x11) 14:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1a, r0, 0x0) 14:32:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x410080) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000005c0)={r2, r4, r2, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r6}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000600)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000640)={r8}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r11 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r11, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r10, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r2, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x2, r6, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000480)={0x0, 0x3, &(0x7f00000001c0)=[r10, r3, 0x0], &(0x7f0000000200)=[0x8, 0x6, 0x9, 0x4, 0x6, 0x7, 0x0, 0x3, 0x8928, 0x9], &(0x7f0000000400)=[r5, r12, r13], &(0x7f0000000440)=[0xfffffffffffff488, 0x5, 0x3ff, 0x101], 0x0, 0x80000001}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)={r14}) 14:32:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x248040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0xa, 0x4, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x248040) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0xa, 0x4, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) (async) 14:32:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x40608c, 0x0) read$usbfs(r0, 0x0, 0x11) 14:32:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x410080) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000005c0)={r2, r4, r2, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0]}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r6}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000600)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000640)={r8}) (async) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r11 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r11, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r10, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r2, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x2, r6, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000480)={0x0, 0x3, &(0x7f00000001c0)=[r10, r3, 0x0], &(0x7f0000000200)=[0x8, 0x6, 0x9, 0x4, 0x6, 0x7, 0x0, 0x3, 0x8928, 0x9], &(0x7f0000000400)=[r5, r12, r13], &(0x7f0000000440)=[0xfffffffffffff488, 0x5, 0x3ff, 0x101], 0x0, 0x80000001}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)={r14}) 14:32:01 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x3000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="bb390a84be4831324549fc3456a9af4125390396d953611bb6b3969a22a2edd8eab2cbe120c0b13cd8bfc4c13068876b22f9a8ce23774e56202addede408253c723826c9adab39f238fc19e115d4c07efd38c65559243e8013ab97c3f15dce846ada3004e13b1e90d0a8eb2206ed2d577d0fbddfeade591c639a3b6346116ad46291decd394f3439a2f613d6b4d54dde6b6eb355de8d0190376f80719dab0ec07cacd4bc558f4f719dece25e95e0bbe119fb194a249e8142fb801128b4a089fc2a0137b5005e0506fcbce05f54b5b2a42cc1d0b874edbceb94eced0d", 0xdc}) read$usbfs(0xffffffffffffffff, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x3) 14:32:01 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x3000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="bb390a84be4831324549fc3456a9af4125390396d953611bb6b3969a22a2edd8eab2cbe120c0b13cd8bfc4c13068876b22f9a8ce23774e56202addede408253c723826c9adab39f238fc19e115d4c07efd38c65559243e8013ab97c3f15dce846ada3004e13b1e90d0a8eb2206ed2d577d0fbddfeade591c639a3b6346116ad46291decd394f3439a2f613d6b4d54dde6b6eb355de8d0190376f80719dab0ec07cacd4bc558f4f719dece25e95e0bbe119fb194a249e8142fb801128b4a089fc2a0137b5005e0506fcbce05f54b5b2a42cc1d0b874edbceb94eced0d", 0xdc}) read$usbfs(0xffffffffffffffff, 0x0, 0x11) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x3000) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="bb390a84be4831324549fc3456a9af4125390396d953611bb6b3969a22a2edd8eab2cbe120c0b13cd8bfc4c13068876b22f9a8ce23774e56202addede408253c723826c9adab39f238fc19e115d4c07efd38c65559243e8013ab97c3f15dce846ada3004e13b1e90d0a8eb2206ed2d577d0fbddfeade591c639a3b6346116ad46291decd394f3439a2f613d6b4d54dde6b6eb355de8d0190376f80719dab0ec07cacd4bc558f4f719dece25e95e0bbe119fb194a249e8142fb801128b4a089fc2a0137b5005e0506fcbce05f54b5b2a42cc1d0b874edbceb94eced0d", 0xdc}) (async) read$usbfs(0xffffffffffffffff, 0x0, 0x11) (async) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x410080) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000005c0)={r2, r4, r2, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000005c0)={r2, r4, r2, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r6}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000600)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000600)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000640)={r8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000640)={r8}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r11 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r11, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r10, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r2, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x2, r6, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000480)={0x0, 0x3, &(0x7f00000001c0)=[r10, r3, 0x0], &(0x7f0000000200)=[0x8, 0x6, 0x9, 0x4, 0x6, 0x7, 0x0, 0x3, 0x8928, 0x9], &(0x7f0000000400)=[r5, r12, r13], &(0x7f0000000440)=[0xfffffffffffff488, 0x5, 0x3ff, 0x101], 0x0, 0x80000001}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)={r14}) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x426040) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, r3, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:01 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x3000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="bb390a84be4831324549fc3456a9af4125390396d953611bb6b3969a22a2edd8eab2cbe120c0b13cd8bfc4c13068876b22f9a8ce23774e56202addede408253c723826c9adab39f238fc19e115d4c07efd38c65559243e8013ab97c3f15dce846ada3004e13b1e90d0a8eb2206ed2d577d0fbddfeade591c639a3b6346116ad46291decd394f3439a2f613d6b4d54dde6b6eb355de8d0190376f80719dab0ec07cacd4bc558f4f719dece25e95e0bbe119fb194a249e8142fb801128b4a089fc2a0137b5005e0506fcbce05f54b5b2a42cc1d0b874edbceb94eced0d", 0xdc}) read$usbfs(0xffffffffffffffff, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x4) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x426040) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, r3, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @remote, 0x3}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x9}}}, 0x118) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x5) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @remote, 0x3}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x9}}}, 0x118) 14:32:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x426040) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x426040) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, r3, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x6) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) (async) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @remote, 0x3}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x9}}}, 0x118) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x7) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x22c143) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0xb739}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000080)='/\t\t\xad\x1f\x00sys.net/ipv4/tcp_mtu_probing\x00') mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) 14:32:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x48380) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8) 14:32:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x48380) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x48380) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000080)='/\t\t\xad\x1f\x00sys.net/ipv4/tcp_mtu_probing\x00') mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) read$usbfs(r0, 0x0, 0x11) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000080)='/\t\t\xad\x1f\x00sys.net/ipv4/tcp_mtu_probing\x00') (async) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) (async) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) (async) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x22c143) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0xb739}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x22c143) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0xb739}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x9) 14:32:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x48380) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x22c143) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0xb739}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000080)='/\t\t\xad\x1f\x00sys.net/ipv4/tcp_mtu_probing\x00') (async) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xa) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r3, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, r1, r3], 0x3, 0x800}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="8ba6112d5c758bd86edfe1b24bf7b4e856728484eee60eb2291241e5360d0f30d076be40ada81962cf9efa0064e5ef3a7d0e27f323aa896a8f9d6eda8f7ff4511dbe43de628f8d5c91619bdc8ae59b2abbe33a13cde6e3adb2bdcec5e2bf73ed5e2a917b66b402d1e184a12648a738aaf4e88ecb7b8b2af84be3", 0x7a}) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x600a00, 0x0) r2 = io_uring_setup(0x6034, &(0x7f0000000100)={0x0, 0x6bc9, 0x2, 0x1, 0x12b}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x110, r2, 0x8000000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 2: mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x4, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x706863b0b11bb5d0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xb) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xd) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x600a00, 0x0) r2 = io_uring_setup(0x6034, &(0x7f0000000100)={0x0, 0x6bc9, 0x2, 0x1, 0x12b}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x110, r2, 0x8000000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 2: mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x4, 0x100010, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x706863b0b11bb5d0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r3, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r3, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, r1, r3], 0x3, 0x800}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="8ba6112d5c758bd86edfe1b24bf7b4e856728484eee60eb2291241e5360d0f30d076be40ada81962cf9efa0064e5ef3a7d0e27f323aa896a8f9d6eda8f7ff4511dbe43de628f8d5c91619bdc8ae59b2abbe33a13cde6e3adb2bdcec5e2bf73ed5e2a917b66b402d1e184a12648a738aaf4e88ecb7b8b2af84be3", 0x7a}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xe) 14:32:01 executing program 2: mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x4, 0x100010, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x706863b0b11bb5d0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x600a00, 0x0) (async) r2 = io_uring_setup(0x6034, &(0x7f0000000100)={0x0, 0x6bc9, 0x2, 0x1, 0x12b}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x110, r2, 0x8000000) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (rerun: 32) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r3, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, r1, r3], 0x3, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="8ba6112d5c758bd86edfe1b24bf7b4e856728484eee60eb2291241e5360d0f30d076be40ada81962cf9efa0064e5ef3a7d0e27f323aa896a8f9d6eda8f7ff4511dbe43de628f8d5c91619bdc8ae59b2abbe33a13cde6e3adb2bdcec5e2bf73ed5e2a917b66b402d1e184a12648a738aaf4e88ecb7b8b2af84be3", 0x7a}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x192, 0x80001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x300) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x192, 0x80001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) read$usbfs(r0, 0x0, 0x0) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x500) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) read$usbfs(r0, 0x0, 0x0) (async, rerun: 64) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) (rerun: 64) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x192, 0x80001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x600) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x700) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x2880, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, r3, 0x0, 0x8, 0x40, 0x6, 0x5, 0x5, 0x1, 0x8, 0x0, 0xfc}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6092, 0x80080) read$usbfs(r0, 0x0, 0x11) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$alg(r1, 0x0, 0x0, 0x400) clock_gettime(0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r2, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x49, 0x0, @fd=r4, 0x10001, 0x7, 0x5, 0xb, 0x0, {0x2}}, 0x9) 14:32:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x900) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6092, 0x80080) read$usbfs(r0, 0x0, 0x11) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$alg(r1, 0x0, 0x0, 0x400) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x49, 0x0, @fd=r4, 0x10001, 0x7, 0x5, 0xb, 0x0, {0x2}}, 0x9) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x2880, 0x0) (async) r2 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x2880, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, r3, 0x0, 0x8, 0x40, 0x6, 0x5, 0x5, 0x1, 0x8, 0x0, 0xfc}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xa00) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) r2 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x2880, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, r3, 0x0, 0x8, 0x40, 0x6, 0x5, 0x5, 0x1, 0x8, 0x0, 0xfc}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6092, 0x80080) read$usbfs(r0, 0x0, 0x11) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$alg(r1, 0x0, 0x0, 0x400) (async) accept4$alg(r1, 0x0, 0x0, 0x400) clock_gettime(0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r2, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x49, 0x0, @fd=r4, 0x10001, 0x7, 0x5, 0xb, 0x0, {0x2}}, 0x9) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r7, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r7, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r11}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x374, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r5}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r22}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x374}}, 0x40000) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xb00) 14:32:01 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x40000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {r1, r2}}, './file0\x00'}) read$usbfs(r6, 0x0, 0xffffff31) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xd00) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x111000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async, rerun: 32) getpeername$packet(r7, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async, rerun: 64) getpeername$packet(r7, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r11}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async, rerun: 64) getpeername$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x374, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r5}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r22}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x374}}, 0x40000) 14:32:01 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x40000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {r1, r2}}, './file0\x00'}) read$usbfs(r6, 0x0, 0xffffff31) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x40000) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000180), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {r1, r2}}, './file0\x00'}) (async) read$usbfs(r6, 0x0, 0xffffff31) (async) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x111000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x111000, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xe00) 14:32:01 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x40000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {r1, r2}}, './file0\x00'}) read$usbfs(r6, 0x0, 0xffffff31) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async, rerun: 64) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r7, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(r7, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r11}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async, rerun: 32) getpeername$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x374, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r5}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r22}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x374}}, 0x40000) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf00) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x111000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x109800) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1f00) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0xfffffffffffffdda}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x109800) read$usbfs(r0, 0x0, 0x11) (async) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0xfffffffffffffdda}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x3f00) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x109800) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0xfffffffffffffdda}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)) (rerun: 32) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608a, 0x0) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x800000) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x140) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xc0ff20) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x140) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xd0ff20) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 14:32:01 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608a, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608a, 0x0) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x140) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000000) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, r1, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000140)={0x0, 0x0, r1, 0xc0c0c0c0}) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000000) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, r1, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000140)={0x0, 0x0, r1, 0xc0c0c0c0}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, r1, 0xc0c0c0c0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000140)={0x0, 0x0, r1, 0xc0c0c0c0}) (async) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x3000000) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608a, 0x0) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, r1, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000140)={0x0, 0x0, r1, 0xc0c0c0c0}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, r1, 0xc0c0c0c0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000140)={0x0, 0x0, r1, 0xc0c0c0c0}) (async) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x4000000) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) (async) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1b) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x5000000) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1b) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:01 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x200000) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x6000000) 14:32:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1b) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x7000000) 14:32:01 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x200000) read$usbfs(r0, 0x0, 0x11) (async) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x200000) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) 14:32:01 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) read$usbfs(r2, 0x0, 0xffffffffffffff5f) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x9000000) 14:32:01 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) read$usbfs(r2, 0x0, 0xffffffffffffff5f) (async) read$usbfs(r2, 0x0, 0xffffffffffffff5f) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xa000000) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x40) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000040)={0xc}) 14:32:01 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) read$usbfs(r2, 0x0, 0xffffffffffffff5f) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) read$usbfs(r2, 0x0, 0xffffffffffffff5f) (async) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xb000000) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x40) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000040)={0xc}) 14:32:01 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0xd000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x218801) read$usbfs(r1, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xd000000) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x40) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x40) (async) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000040)={0xc}) 14:32:01 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0xd000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x218801) read$usbfs(r1, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xe000000) 14:32:01 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0xd000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x218801) read$usbfs(r1, 0x0, 0x11) (async) read$usbfs(r1, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf000000) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x32dcd9886a25ed97, 0x34, 0xfffffffffffffe6c, 0xfffffef1}) r1 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x288100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2227, 0xe0842) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 0: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20010, 0xffffffffffffffff, 0xfe86b000) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r4, 0xbbbbbbbb}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r8 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r7, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x4, r4, r7, 0xb0b0b0b0}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1f000000) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x32dcd9886a25ed97, 0x34, 0xfffffffffffffe6c, 0xfffffef1}) (async, rerun: 64) r1 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x288100, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2227, 0xe0842) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 0: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20010, 0xffffffffffffffff, 0xfe86b000) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20010, 0xffffffffffffffff, 0xfe86b000) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) (async) openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) (async) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r4, 0xbbbbbbbb}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r8 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r7, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r7, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x4, r4, r7, 0xb0b0b0b0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x4, r4, r7, 0xb0b0b0b0}) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1fffefff) 14:32:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x32dcd9886a25ed97, 0x34, 0xfffffffffffffe6c, 0xfffffef1}) r1 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x288100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x32dcd9886a25ed97, 0x34, 0xfffffffffffffe6c, 0xfffffef1}) (async) openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x288100, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2227, 0xe0842) read$usbfs(r0, 0x0, 0x11) syz_open_dev$usbfs(&(0x7f0000000000), 0x2227, 0xe0842) (async) read$usbfs(r0, 0x0, 0x11) (async) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1fffffff) 14:32:01 executing program 0: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20010, 0xffffffffffffffff, 0xfe86b000) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) (async) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r4, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r4, 0xbbbbbbbb}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r8 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r7, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x4, r4, r7, 0xb0b0b0b0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x4, r4, r7, 0xb0b0b0b0}) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x200) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x20ffbfff) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 14:32:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x200) read$usbfs(r0, 0x0, 0x11) 14:32:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x20ffc000) 14:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x200) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x20ffcfff) 14:32:02 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) read$usbfs(r0, 0x0, 0x0) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x20ffd000) 14:32:02 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='/dev/dri/card#\x00') r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe6, 0x1, 0x9, 0xffff, 0xcda, 0x2c46, 0x80000001, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x20ffffff) 14:32:02 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) read$usbfs(r0, 0x0, 0x0) 14:32:02 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='/dev/dri/card#\x00') (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe6, 0x1, 0x9, 0xffff, 0xcda, 0x2c46, 0x80000001, 0x6, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x21000fff) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x208002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:02 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) read$usbfs(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000}) (async) read$usbfs(r0, 0x0, 0x0) (async) 14:32:02 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='/dev/dri/card#\x00') r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe6, 0x1, 0x9, 0xffff, 0xcda, 0x2c46, 0x80000001, 0x6, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x208002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x208002) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2ce1ffff) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffff, 0x280080) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x4000000000000169}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r0}) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/248) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x3f000000) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffff, 0x280080) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x208002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:02 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x4000000000000169}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r0}) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/248) (async) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/248) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) 14:32:02 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x4000000000000169}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r0}) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/248) (async) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x56e68fff) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffff, 0x280080) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x40, 0x2001) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, r2, 0x0, 0x1cf, 0x4, 0x7fff, 0x1, 0x7f, 0x1, 0x8, 0x800}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x2, 0x1, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x56e89fff) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x40, 0x2001) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, r2, 0x0, 0x1cf, 0x4, 0x7fff, 0x1, 0x7f, 0x1, 0x8, 0x800}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x2, 0x1, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:02 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x5c50afff) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1, r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) read$usbfs(r0, 0x0, 0x11) (async) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x40, 0x2001) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, r2, 0x0, 0x1cf, 0x4, 0x7fff, 0x1, 0x7f, 0x1, 0x8, 0x800}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x2, 0x1, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf5dfefff) 14:32:02 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x109401, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x2, [0xad, 0x2]}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r1, 0x0, 0x11) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf5dfffff) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x400, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x80, 0x2140) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000329bd7000fcdbdf25140000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="03000008", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000100010000000c000600000000000000000008000308", @ANYRES32=r5, @ANYBLOB="0c00000000004000009b0000"], 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008050) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) 14:32:02 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x109401, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x2, [0xad, 0x2]}) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r1, 0x0, 0x11) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf65fffff) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x80, 0x2140) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000329bd7000fcdbdf25140000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="03000008", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000100010000000c000600000000000000000008000308", @ANYRES32=r5, @ANYBLOB="0c00000000004000009b0000"], 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008050) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) 14:32:02 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x109401, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x2, [0xad, 0x2]}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r1, 0x0, 0x11) (async) read$usbfs(r1, 0x0, 0x11) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x400, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf67fffff) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x80, 0x2140) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000329bd7000fcdbdf25140000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="03000008", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000100010000000c000600000000000000000008000308", @ANYRES32=r5, @ANYBLOB="0c00000000004000009b0000"], 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008050) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000002c0)) 14:32:02 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r2 = shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) read$usbfs(r1, 0x0, 0x0) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf69fffff) 14:32:02 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x400, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x3, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) (async) r2 = shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async) read$usbfs(r1, 0x0, 0x0) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf6bfffff) 14:32:02 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x3, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r2 = shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) (async, rerun: 64) read$usbfs(r1, 0x0, 0x0) (rerun: 64) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="74756e6c3000000000000000000400005943cf57276108856eec3f604f90f2928906d28887a9c2daffbd6803c934c23445b45d1027f94d5f2ac7862d8875dea4d9e9d61d33e5634caca8caa3d22729", @ANYRES32=0x0, @ANYBLOB="7f50800000000003000000094b56006c006800000729907864010101e00000028307000000000044106e00000100010001000000000002070ff60a010102ac1414bbac1414aa9404010000892b2f7f00000164010102ffffffff64010100ffffffff0000000000000000ac1e01017f000001ac1414380000"]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r7, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r7, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)=ANY=[@ANYBLOB="f8070000", @ANYRES16=0x0, @ANYBLOB="30002abd7000fddbdf250000000008000100", @ANYRES32=r8, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r9, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000200ff045900000008000100", @ANYRES32=r11, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040031ffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r14, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000b8080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005000201ff07000003002080010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008600000008000600", @ANYRES32=r18, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r19, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB], 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2c4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0xfffffffffffffcf7, 0x6, r20}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) r21 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x11f200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r21, 0xc03064b7, &(0x7f00000001c0)={r22, 0x0, r23, 0x8, 0x1ff, 0x1, 0x9, 0xfffffffe, 0x47, 0x8e5, 0x80000000, 0x10001}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf6dfffff) 14:32:02 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x3, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="74756e6c3000000000000000000400005943cf57276108856eec3f604f90f2928906d28887a9c2daffbd6803c934c23445b45d1027f94d5f2ac7862d8875dea4d9e9d61d33e5634caca8caa3d22729", @ANYRES32=0x0, @ANYBLOB="7f50800000000003000000094b56006c006800000729907864010101e00000028307000000000044106e00000100010001000000000002070ff60a010102ac1414bbac1414aa9404010000892b2f7f00000164010102ffffffff64010100ffffffff0000000000000000ac1e01017f000001ac1414380000"]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r7, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(r7, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)=ANY=[@ANYBLOB="f8070000", @ANYRES16=0x0, @ANYBLOB="30002abd7000fddbdf250000000008000100", @ANYRES32=r8, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r9, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000200ff045900000008000100", @ANYRES32=r11, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040031ffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r14, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000b8080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005000201ff07000003002080010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008600000008000600", @ANYRES32=r18, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r19, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB], 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2c4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0xfffffffffffffcf7, 0x6, r20}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) r21 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x11f200, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r21, 0xc03064b7, &(0x7f00000001c0)={r22, 0x0, r23, 0x8, 0x1ff, 0x1, 0x9, 0xfffffffe, 0x47, 0x8e5, 0x80000000, 0x10001}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf71fffff) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7, 0x1, 0x3, 0xfffff801, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@ssrr={0x89, 0xf, 0xc1, [@local, @remote, @local]}, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x4, [{@multicast1, 0x1ff}, {@broadcast, 0xfffffffa}, {@local}, {@multicast2, 0x8}, {@empty, 0x3}, {@rand_addr=0x64010102, 0x10001}, {@multicast1, 0x8000}]}]}}}}}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2044040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x5800) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf7f35fff) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7, 0x1, 0x3, 0xfffff801, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@ssrr={0x89, 0xf, 0xc1, [@local, @remote, @local]}, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x4, [{@multicast1, 0x1ff}, {@broadcast, 0xfffffffa}, {@local}, {@multicast2, 0x8}, {@empty, 0x3}, {@rand_addr=0x64010102, 0x10001}, {@multicast1, 0x8000}]}]}}}}}) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2044040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x5800) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="74756e6c3000000000000000000400005943cf57276108856eec3f604f90f2928906d28887a9c2daffbd6803c934c23445b45d1027f94d5f2ac7862d8875dea4d9e9d61d33e5634caca8caa3d22729", @ANYRES32=0x0, @ANYBLOB="7f50800000000003000000094b56006c006800000729907864010101e00000028307000000000044106e00000100010001000000000002070ff60a010102ac1414bbac1414aa9404010000892b2f7f00000164010102ffffffff64010100ffffffff0000000000000000ac1e01017f000001ac1414380000"]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r7, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (rerun: 64) getpeername$packet(r7, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)=ANY=[@ANYBLOB="f8070000", @ANYRES16=0x0, @ANYBLOB="30002abd7000fddbdf250000000008000100", @ANYRES32=r8, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r9, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000200ff045900000008000100", @ANYRES32=r11, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040031ffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r14, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000b8080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005000201ff07000003002080010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008600000008000600", @ANYRES32=r18, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r19, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB], 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2c4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0xfffffffffffffcf7, 0x6, r20}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) r21 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x11f200, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r21, 0xc03064b7, &(0x7f00000001c0)={r22, 0x0, r23, 0x8, 0x1ff, 0x1, 0x9, 0xfffffffe, 0x47, 0x8e5, 0x80000000, 0x10001}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xff0f0021) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7, 0x1, 0x3, 0xfffff801, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@ssrr={0x89, 0xf, 0xc1, [@local, @remote, @local]}, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x4, [{@multicast1, 0x1ff}, {@broadcast, 0xfffffffa}, {@local}, {@multicast2, 0x8}, {@empty, 0x3}, {@rand_addr=0x64010102, 0x10001}, {@multicast1, 0x8000}]}]}}}}}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2044040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x5800) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) read$usbfs(r0, 0x0, 0x11) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7, 0x1, 0x3, 0xfffff801, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@ssrr={0x89, 0xf, 0xc1, [@local, @remote, @local]}, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x4, [{@multicast1, 0x1ff}, {@broadcast, 0xfffffffa}, {@local}, {@multicast2, 0x8}, {@empty, 0x3}, {@rand_addr=0x64010102, 0x10001}, {@multicast1, 0x8000}]}]}}}}}) (async) openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2044040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x5800) (async) 14:32:02 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=@can_delroute={0x164, 0x19, 0x10, 0x70bd26, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xfffffffffffffffb, 0x1, 0x8}}, @CGW_LIM_HOPS={0x5, 0xd, 0xa7}, @CGW_MOD_UID={0x8, 0xe, r0}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "9932892408167c0f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x40, 0x44, 0x3c, 0xff, 0x1f, "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", 0x3, "ceaf6cc78818fff77701ade62182bdcd37eadcc4"}}]}, 0x164}}, 0x44045) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000780)) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_WRITE_FIXED={0x5, 0x18, 0x4000, @fd_index=0x5, 0x0, 0x4, 0x1, 0x2, 0x1, {0x1}}, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000640)={0x2, 0x0, &(0x7f0000000600)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000006c0)={0x0, r5, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r6, 0x551f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x1, 0x4}) socket$inet6_dccp(0xa, 0x6, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x5, 0x4, 0x3, 0x2}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xff5ff3f7) 14:32:02 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=@can_delroute={0x164, 0x19, 0x10, 0x70bd26, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xfffffffffffffffb, 0x1, 0x8}}, @CGW_LIM_HOPS={0x5, 0xd, 0xa7}, @CGW_MOD_UID={0x8, 0xe, r0}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "9932892408167c0f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x40, 0x44, 0x3c, 0xff, 0x1f, "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", 0x3, "ceaf6cc78818fff77701ade62182bdcd37eadcc4"}}]}, 0x164}}, 0x44045) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1, 0x3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000780)) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_WRITE_FIXED={0x5, 0x18, 0x4000, @fd_index=0x5, 0x0, 0x4, 0x1, 0x2, 0x1, {0x1}}, 0x2) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000640)={0x2, 0x0, &(0x7f0000000600)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000006c0)={0x0, r5, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) (async) ioctl$USBDEVFS_GET_SPEED(r6, 0x551f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x1, 0x4}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x5, 0x4, 0x3, 0x2}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xff8fe656) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608e, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x3c, 0x0) read$usbfs(r0, 0x0, 0x11) socket$nl_route(0x10, 0x3, 0x0) 14:32:02 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=@can_delroute={0x164, 0x19, 0x10, 0x70bd26, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xfffffffffffffffb, 0x1, 0x8}}, @CGW_LIM_HOPS={0x5, 0xd, 0xa7}, @CGW_MOD_UID={0x8, 0xe, r0}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "9932892408167c0f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x40, 0x44, 0x3c, 0xff, 0x1f, "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", 0x3, "ceaf6cc78818fff77701ade62182bdcd37eadcc4"}}]}, 0x164}}, 0x44045) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000780)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000780)) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_WRITE_FIXED={0x5, 0x18, 0x4000, @fd_index=0x5, 0x0, 0x4, 0x1, 0x2, 0x1, {0x1}}, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000640)={0x2, 0x0, &(0x7f0000000600)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000640)={0x2, 0x0, &(0x7f0000000600)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000006c0)={0x0, r5, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r6, 0x551f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x1, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x1, 0x4}) socket$inet6_dccp(0xa, 0x6, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x5, 0x4, 0x3, 0x2}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xff9fe856) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608e, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x3c, 0x0) read$usbfs(r0, 0x0, 0x11) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x608e, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x3c, 0x0) (async) read$usbfs(r0, 0x0, 0x11) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 14:32:02 executing program 0: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0xfffffffffffffff7, 0x0, r1, 0xe0e0e0e0}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffaf505c) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={r2, 0x0, 0x0, 0xfffffffc, 0xa1, 0x5c3, 0xf8, 0x0, 0x1c00, 0x0, 0x3, 0x1f}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0]}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000002c0)={r2, r4, r5, 0x1, 0x1ff, 0x0, 0x3, 0x3, 0xffffffff, 0x101, 0x1, 0x80000001}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0}) 14:32:02 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0x608e, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608e, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x3c, 0x0) read$usbfs(r0, 0x0, 0x11) socket$nl_route(0x10, 0x3, 0x0) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffbfff20) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={r2, 0x0, 0x0, 0xfffffffc, 0xa1, 0x5c3, 0xf8, 0x0, 0x1c00, 0x0, 0x3, 0x1f}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0]}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000002c0)={r2, r4, r5, 0x1, 0x1ff, 0x0, 0x3, 0x3, 0xffffffff, 0x101, 0x1, 0x80000001}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000002c0)={r2, r4, r5, 0x1, 0x1ff, 0x0, 0x3, 0x3, 0xffffffff, 0x101, 0x1, 0x80000001}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0}) 14:32:02 executing program 0: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0xfffffffffffffff7, 0x0, r1, 0xe0e0e0e0}) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) mmap$snddsp(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1000002, 0x80010, r1, 0x0) 14:32:02 executing program 0: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f00000000c0)) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0xfffffffffffffff7, 0x0, r1, 0xe0e0e0e0}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffcfff20) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={r2, 0x0, 0x0, 0xfffffffc, 0xa1, 0x5c3, 0xf8, 0x0, 0x1c00, 0x0, 0x3, 0x1f}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0]}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000002c0)={r2, r4, r5, 0x1, 0x1ff, 0x0, 0x3, 0x3, 0xffffffff, 0x101, 0x1, 0x80000001}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={r2, 0x0, 0x0, 0xfffffffc, 0xa1, 0x5c3, 0xf8, 0x0, 0x1c00, 0x0, 0x3, 0x1f}) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0]}) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000002c0)={r2, r4, r5, 0x1, 0x1ff, 0x0, 0x3, 0x3, 0xffffffff, 0x101, 0x1, 0x80000001}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0}) (async) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) mmap$snddsp(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1000002, 0x80010, r1, 0x0) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffefdff5) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x802, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x4, 0x2, 0x4}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000480)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000004c0)={r2}) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, 0x0, 0xbbbbbbbb}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000500)={0x9, 0x0, r6, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r10, @ANYRES16=r9, @ANYBLOB="010000000000000000227461ac87586ecd00000000000000000000000000d536e4c0ea3f95ee197e396a7e3b5231efaec622d72aa58c8eeeab15efd81d515dcb8c2fb9021b046bba6d5ac4b1edf37e7d3bb95d44061831623a1afa42d68a0ce9d1a6ed9a5fa76f2ededb4ce6dca8a12b60a6dc47610fb1f7e90f1a4c2c00d1ece69a8b751707a1d6a2a86ff63cfcdfc6a461f0693f98eb771c53d287b412a693675dc076dc40b05cef28397899b677169c485c40e999e92a8d12c31d8d7505db7476111e1bc3cfcbdfb203b3ea2e2e074ffeefb902a14fcb865cf753dd28e44f017405d7f513a72d03", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r11 = getpgid(0x0) syz_open_procfs$namespace(r11, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080026bd7001008b4decc192ff819d591b8d9159c7dfc300001600080001000300"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_getvlan={0x20, 0x72, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffefff1f) 14:32:02 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) mmap$snddsp(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1000002, 0x80010, r1, 0x0) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x802, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x4, 0x2, 0x4}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000480)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000004c0)={r2}) (async) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, 0x0, 0xbbbbbbbb}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000500)={0x9, 0x0, r6, 0xfbfbfbfb}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r10, @ANYRES16=r9, @ANYBLOB="010000000000000000227461ac87586ecd00000000000000000000000000d536e4c0ea3f95ee197e396a7e3b5231efaec622d72aa58c8eeeab15efd81d515dcb8c2fb9021b046bba6d5ac4b1edf37e7d3bb95d44061831623a1afa42d68a0ce9d1a6ed9a5fa76f2ededb4ce6dca8a12b60a6dc47610fb1f7e90f1a4c2c00d1ece69a8b751707a1d6a2a86ff63cfcdfc6a461f0693f98eb771c53d287b412a693675dc076dc40b05cef28397899b677169c485c40e999e92a8d12c31d8d7505db7476111e1bc3cfcbdfb203b3ea2e2e074ffeefb902a14fcb865cf753dd28e44f017405d7f513a72d03", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r11 = getpgid(0x0) syz_open_procfs$namespace(r11, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080026bd7001008b4decc192ff819d591b8d9159c7dfc300001600080001000300"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) (async) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_getvlan={0x20, 0x72, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffff1ff7) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x15}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x8000000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x40100, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x11, 0x0, @fd=r2, 0x8, 0x0, 0x7, 0x4}, 0x10000) 14:32:02 executing program 2: read$usbfs(0xffffffffffffffff, 0x0, 0x11) 14:32:02 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x802, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x4, 0x2, 0x4}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000480)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000004c0)={r2}) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, 0x0, 0xbbbbbbbb}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000500)={0x9, 0x0, r6, 0xfbfbfbfb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000500)={0x9, 0x0, r6, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0}) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r10, @ANYRES16=r9, @ANYBLOB="010000000000000000227461ac87586ecd00000000000000000000000000d536e4c0ea3f95ee197e396a7e3b5231efaec622d72aa58c8eeeab15efd81d515dcb8c2fb9021b046bba6d5ac4b1edf37e7d3bb95d44061831623a1afa42d68a0ce9d1a6ed9a5fa76f2ededb4ce6dca8a12b60a6dc47610fb1f7e90f1a4c2c00d1ece69a8b751707a1d6a2a86ff63cfcdfc6a461f0693f98eb771c53d287b412a693675dc076dc40b05cef28397899b677169c485c40e999e92a8d12c31d8d7505db7476111e1bc3cfcbdfb203b3ea2e2e074ffeefb902a14fcb865cf753dd28e44f017405d7f513a72d03", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r10, @ANYRES16=r9, @ANYBLOB="010000000000000000227461ac87586ecd00000000000000000000000000d536e4c0ea3f95ee197e396a7e3b5231efaec622d72aa58c8eeeab15efd81d515dcb8c2fb9021b046bba6d5ac4b1edf37e7d3bb95d44061831623a1afa42d68a0ce9d1a6ed9a5fa76f2ededb4ce6dca8a12b60a6dc47610fb1f7e90f1a4c2c00d1ece69a8b751707a1d6a2a86ff63cfcdfc6a461f0693f98eb771c53d287b412a693675dc076dc40b05cef28397899b677169c485c40e999e92a8d12c31d8d7505db7476111e1bc3cfcbdfb203b3ea2e2e074ffeefb902a14fcb865cf753dd28e44f017405d7f513a72d03", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) getpgid(0x0) (async) r11 = getpgid(0x0) syz_open_procfs$namespace(r11, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080026bd7001008b4decc192ff819d591b8d9159c7dfc300001600080001000300"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080026bd7001008b4decc192ff819d591b8d9159c7dfc300001600080001000300"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_getvlan={0x20, 0x72, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_getvlan={0x20, 0x72, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x15}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x8000000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x40100, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x11, 0x0, @fd=r2, 0x8, 0x0, 0x7, 0x4}, 0x10000) 14:32:02 executing program 2: read$usbfs(0xffffffffffffffff, 0x0, 0x11) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffff5ff6) 14:32:02 executing program 2: read$usbfs(0xffffffffffffffff, 0x0, 0x11) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffff7ff6) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, r3, r4, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r5, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000540)={&(0x7f00000004c0)=[r10, r11, r8, r9, r6], 0x5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="7965f6f4b1087675f53de7eaacd1f260bf7d8aef2a004fb2c34b1700275c9ed5f88c3a4fc3c4e1e1f39843a408b23dcf5dd39471a748d79e15d2cd5a9538bcbe56e09ab7914893913c5cd0f5bbcb328f27262dde41db3423fc719e93caa65c93158890e49390ab1741", 0x69}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) accept4$alg(r12, 0x0, 0x0, 0x80800) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x15}) (async) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x8000000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x40100, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x11, 0x0, @fd=r2, 0x8, 0x0, 0x7, 0x4}, 0x10000) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffff9ff6) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, r3, r4, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r5, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000540)={&(0x7f00000004c0)=[r10, r11, r8, r9, r6], 0x5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="7965f6f4b1087675f53de7eaacd1f260bf7d8aef2a004fb2c34b1700275c9ed5f88c3a4fc3c4e1e1f39843a408b23dcf5dd39471a748d79e15d2cd5a9538bcbe56e09ab7914893913c5cd0f5bbcb328f27262dde41db3423fc719e93caa65c93158890e49390ab1741", 0x69}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) (async) accept4$alg(r12, 0x0, 0x0, 0x80800) 14:32:02 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffbff6) 14:32:02 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffdff5) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, r3, r4, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r5, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000540)={&(0x7f00000004c0)=[r10, r11, r8, r9, r6], 0x5, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="7965f6f4b1087675f53de7eaacd1f260bf7d8aef2a004fb2c34b1700275c9ed5f88c3a4fc3c4e1e1f39843a408b23dcf5dd39471a748d79e15d2cd5a9538bcbe56e09ab7914893913c5cd0f5bbcb328f27262dde41db3423fc719e93caa65c93158890e49390ab1741", 0x69}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) accept4$alg(r12, 0x0, 0x0, 0x80800) (async) accept4$alg(r12, 0x0, 0x0, 0x80800) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x7fff, "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"}) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffdff6) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x7fff, "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"}) (async) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_setlink={0x34, 0x13, 0x20, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x420, 0x200}, [@IFLA_IFNAME={0x14, 0x3, 'nr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x20048081) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x4, 0x0, r1}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe12c) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x7fff, "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"}) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_setlink={0x34, 0x13, 0x20, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x420, 0x200}, [@IFLA_IFNAME={0x14, 0x3, 'nr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x20048081) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x4, 0x0, r1}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffff1f) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000080)={0x5, 0x16, 0x3, 0xd62b, 0x59, 0xffffff82, &(0x7f0000000000)="36547277f4349a1be088e0fe16160af7521b00fca94d14190a48026fe1773cc28a6fdfae39353d9484da05928b650fdbcae839a57a6ba1c28a81959f68b83fa9e7e0a09f69890ca34db9efa88e10b80468a3278635fe16ea4c"}) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x500) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffff20) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async, rerun: 32) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000080)={0x5, 0x16, 0x3, 0xd62b, 0x59, 0xffffff82, &(0x7f0000000000)="36547277f4349a1be088e0fe16160af7521b00fca94d14190a48026fe1773cc28a6fdfae39353d9484da05928b650fdbcae839a57a6ba1c28a81959f68b83fa9e7e0a09f69890ca34db9efa88e10b80468a3278635fe16ea4c"}) (async, rerun: 32) read$usbfs(r0, 0x0, 0x11) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280), &(0x7f00000002c0)=0x14) (async) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_setlink={0x34, 0x13, 0x20, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x420, 0x200}, [@IFLA_IFNAME={0x14, 0x3, 'nr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x20048081) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x4, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x4, 0x0, r1}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000080)={0x5, 0x16, 0x3, 0xd62b, 0x59, 0xffffff82, &(0x7f0000000000)="36547277f4349a1be088e0fe16160af7521b00fca94d14190a48026fe1773cc28a6fdfae39353d9484da05928b650fdbcae839a57a6ba1c28a81959f68b83fa9e7e0a09f69890ca34db9efa88e10b80468a3278635fe16ea4c"}) (async, rerun: 64) read$usbfs(r0, 0x0, 0x11) (rerun: 64) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x500) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x10000000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x46100) r2 = syz_io_uring_setup(0x5317, &(0x7f0000000000)={0x0, 0xaf64, 0x80, 0x1, 0x2ed}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) read$usbfs(r1, 0x0, 0x11) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x1c80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="723ae62d0ece84dcff3c2989f6243afe4a7b3c7671c1d7ea38aea96f88cf4aee30cec6b6aaf834876f28762e875194195f68b9718b2baa780cff8c9b61ac87eacce6dec2b40ac14a02c4e8ef272a10a407655899eb23f1ec65c0717262899f36d8bc81795a640325aeb48cdb493ce0262ba29f070bd40c210eb3d3c8a67e96cee6c6746d80eb11a02e2b0deb3ad04a1efb18562e7d99bb5329ab88d54a060a1822f9f5d549251596953f", 0xaa}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x500) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:02 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x10000000) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x46100) (async) r2 = syz_io_uring_setup(0x5317, &(0x7f0000000000)={0x0, 0xaf64, 0x80, 0x1, 0x2ed}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) read$usbfs(r1, 0x0, 0x11) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x1c80) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="723ae62d0ece84dcff3c2989f6243afe4a7b3c7671c1d7ea38aea96f88cf4aee30cec6b6aaf834876f28762e875194195f68b9718b2baa780cff8c9b61ac87eacce6dec2b40ac14a02c4e8ef272a10a407655899eb23f1ec65c0717262899f36d8bc81795a640325aeb48cdb493ce0262ba29f070bd40c210eb3d3c8a67e96cee6c6746d80eb11a02e2b0deb3ad04a1efb18562e7d99bb5329ab88d54a060a1822f9f5d549251596953f", 0xaa}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x0) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x100000000, 0x7, 0x1ff, 0xe000000000000000, 0x1, 0x4, 0xb}, 0x0, &(0x7f0000000100)={0x200, 0x401, 0x4, 0x7ffffffc, 0x1, 0x6, 0x7, 0x6b}, &(0x7f0000000140)={r2, r3+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1, 0xfffffffc]}, 0x8}) syz_open_dev$dri(&(0x7f0000000200), 0x800, 0x58003) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r5}) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x100000000, 0x7, 0x1ff, 0xe000000000000000, 0x1, 0x4, 0xb}, 0x0, &(0x7f0000000100)={0x200, 0x401, 0x4, 0x7ffffffc, 0x1, 0x6, 0x7, 0x6b}, &(0x7f0000000140)={r2, r3+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1, 0xfffffffc]}, 0x8}) syz_open_dev$dri(&(0x7f0000000200), 0x800, 0x58003) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r5}) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x100000000, 0x7, 0x1ff, 0xe000000000000000, 0x1, 0x4, 0xb}, 0x0, &(0x7f0000000100)={0x200, 0x401, 0x4, 0x7ffffffc, 0x1, 0x6, 0x7, 0x6b}, &(0x7f0000000140)={r2, r3+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1, 0xfffffffc]}, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000200), 0x800, 0x58003) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r5}) (async) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) (async) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x5, 0x9}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x0) 14:32:02 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x10000000) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x46100) (async) r2 = syz_io_uring_setup(0x5317, &(0x7f0000000000)={0x0, 0xaf64, 0x80, 0x1, 0x2ed}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) read$usbfs(r1, 0x0, 0x11) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x1c80) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="723ae62d0ece84dcff3c2989f6243afe4a7b3c7671c1d7ea38aea96f88cf4aee30cec6b6aaf834876f28762e875194195f68b9718b2baa780cff8c9b61ac87eacce6dec2b40ac14a02c4e8ef272a10a407655899eb23f1ec65c0717262899f36d8bc81795a640325aeb48cdb493ce0262ba29f070bd40c210eb3d3c8a67e96cee6c6746d80eb11a02e2b0deb3ad04a1efb18562e7d99bb5329ab88d54a060a1822f9f5d549251596953f", 0xaa}) 14:32:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x0) 14:32:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x100000000, 0x7, 0x1ff, 0xe000000000000000, 0x1, 0x4, 0xb}, 0x0, &(0x7f0000000100)={0x200, 0x401, 0x4, 0x7ffffffc, 0x1, 0x6, 0x7, 0x6b}, &(0x7f0000000140)={r2, r3+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1, 0xfffffffc]}, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000200), 0x800, 0x58003) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r5}) (async) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) 14:32:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x5, 0x9}) 14:32:03 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000100)={0x4, "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"}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) 14:32:03 executing program 3: mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x40010, 0xffffffffffffffff, 0x6000) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x20000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r2 = openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000280)={0x0, 0x0, r3}) syz_io_uring_setup(0x6fe0, &(0x7f0000000100)={0x0, 0xf3bf, 0x400, 0x0, 0x22c, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 14:32:03 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000100)={0x4, "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"}) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)={0x58, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100025bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="df3279e8a62d8ad1"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, r6, 0x0, 0xe0e0e0e0}) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x5, 0x9}) 14:32:03 executing program 3: mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x40010, 0xffffffffffffffff, 0x6000) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x20000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r2 = openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x40100, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000280)={0x0, 0x0, r3}) (async) syz_io_uring_setup(0x6fe0, &(0x7f0000000100)={0x0, 0xf3bf, 0x400, 0x0, 0x22c, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)={0x58, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) (async, rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100025bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="df3279e8a62d8ad1"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, r6, 0x0, 0xe0e0e0e0}) 14:32:03 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000100)={0x4, "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"}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) 14:32:03 executing program 3: mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x40010, 0xffffffffffffffff, 0x6000) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x20000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r2 = openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x40100, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000280)={0x0, 0x0, r3}) syz_io_uring_setup(0x6fe0, &(0x7f0000000100)={0x0, 0xf3bf, 0x400, 0x0, 0x22c, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x0) 14:32:03 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) (async) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)={0x58, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100025bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="df3279e8a62d8ad1"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100025bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="df3279e8a62d8ad1"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, r6, 0x0, 0xe0e0e0e0}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x0) 14:32:03 executing program 0: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x3, [0x2, 0x1, 0x8]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x2000) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x0) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 14:32:03 executing program 0: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x3, [0x2, 0x1, 0x8]}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 14:32:03 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x723082) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 14:32:03 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x2000) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:03 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x723082) syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x723082) (async) 14:32:03 executing program 0: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x3, [0x2, 0x1, 0x8]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 14:32:03 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x723082) syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x723082) (async) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x400200) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x810, r0, 0x200) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x200) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$usbmon(&(0x7f0000000080), 0x1000, 0xc00) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x7, 0x101000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="6edd27800d1ba38ce5ee5be11e47500641f797b6b63ad5d3b4a3e59664fcf78f405979f84b04f68d3eb7fa33a33f04a9fa3bda0665695b5f763467d7d02568a85a2bd2647b832b45b03453acfe8c9a8d9b074a2aee7b1016095d9e62bce36c25f881d2cfe54e533af4a4611b95216e2e5b4f10e37c6e2a6bca9c610a1dce47277b42f716d329972f2b74d06eafaad12d6fb9e828", 0x94, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x4, 0x0, r1}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r8, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000007c0)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[{}, {}], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x2, 0x7, 0x4, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x3, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) r13 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r13, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r14], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000b80)={0x0, 0x4, &(0x7f0000000300)=[r3, r3, r5, r3], &(0x7f0000000340)=[0x2, 0x200, 0xffffa8e0], &(0x7f0000000b00)=[r6, 0x0, r8, 0x0, 0x0, r10, r11, r14], &(0x7f0000000b40)=[0x401, 0xfe00000000000000], 0x0, 0x879e}) 14:32:03 executing program 2: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x6000810) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000340)={0x8, "8c3571d10d0cf936075aa34b4c43c28da1310b7d16c6e8339d8c148530a65320daad6600000000000000ab87e61da0188d84567a6cba9830291954798ba864eb04c0a0b3b7e6a06d1e704018774e442aab1cced7a35add0f758d86239ac0c228097ca38b08671b4abbd0674ba90e9fd84355402180ccac65cd683f49794f0300000000005bba6132ed920e40b9f07b1d741cf977e478f0f88c785a02753daec467d309e0d1de7c5c00ca7aca1b0e1c0dac6336eff4f22b751c1fe732da045af180f1efc91de686291f44d6e08b8bd4beea6bfe8d33a9a9a9684fd285f7f6a3845f62642f32324a8eb74f7f67cf0e36d6f66234ced814085dfe88b9c17f087ce4"}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x400200) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) (async) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x810, r0, 0x200) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x200) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x200) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) (async) 14:32:03 executing program 2: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x6000810) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000340)={0x8, "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"}) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x1000, 0xc00) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x7, 0x101000) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="6edd27800d1ba38ce5ee5be11e47500641f797b6b63ad5d3b4a3e59664fcf78f405979f84b04f68d3eb7fa33a33f04a9fa3bda0665695b5f763467d7d02568a85a2bd2647b832b45b03453acfe8c9a8d9b074a2aee7b1016095d9e62bce36c25f881d2cfe54e533af4a4611b95216e2e5b4f10e37c6e2a6bca9c610a1dce47277b42f716d329972f2b74d06eafaad12d6fb9e828", 0x94, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x4, 0x0, r1}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r8, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000007c0)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[{}, {}], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x2, 0x7, 0x4, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x3, 0x0, r1}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) r13 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r13, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r14], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000b80)={0x0, 0x4, &(0x7f0000000300)=[r3, r3, r5, r3], &(0x7f0000000340)=[0x2, 0x200, 0xffffa8e0], &(0x7f0000000b00)=[r6, 0x0, r8, 0x0, 0x0, r10, r11, r14], &(0x7f0000000b40)=[0x401, 0xfe00000000000000], 0x0, 0x879e}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x400200) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x810, r0, 0x200) syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x400200) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) (async) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x810, r0, 0x200) (async) 14:32:03 executing program 2: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x6000810) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000340)={0x8, "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"}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) read$usbfs(r0, 0x0, 0x11) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x6000810) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) (async) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000340)={0x8, "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"}) (async) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x200) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@dellinkprop={0x19c, 0x6d, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r12, 0x8109, 0x800}, [@IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "99c37cf74656ea1a7611d60ebaf13aa5914a137eae1995a8df0b"}, @IFLA_VF_PORTS={0x128, 0x18, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0x7, 0x2, '&#\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9199b682e1e71fbc2847d7fa52bd0a05"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3ded3d6f7bb84aafaac2134185e0be5"}, @IFLA_PORT_VF={0x8, 0x1, 0x383}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, '{%.\x90@)}\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c7870e63b8f8d9608c68308f2f5f35a4"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2d812842d4110f6aa1afaac27aba60b8"}, @IFLA_PORT_PROFILE={0xf, 0x2, '%^%.\'@#(,-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fe88c0ca23582564f087f5a3216c475d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9149cb13308f6f1f33295cbb6cfac4f9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a2fcf5191b06ac41a65d5db4c8968597"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}, @IFLA_PORT_PROFILE={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'nr0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x100}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8001}, 0x40010) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$usbmon(&(0x7f0000000080), 0x1000, 0xc00) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x7, 0x101000) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="6edd27800d1ba38ce5ee5be11e47500641f797b6b63ad5d3b4a3e59664fcf78f405979f84b04f68d3eb7fa33a33f04a9fa3bda0665695b5f763467d7d02568a85a2bd2647b832b45b03453acfe8c9a8d9b074a2aee7b1016095d9e62bce36c25f881d2cfe54e533af4a4611b95216e2e5b4f10e37c6e2a6bca9c610a1dce47277b42f716d329972f2b74d06eafaad12d6fb9e828", 0x94, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x4, 0x0, r1}) (async) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r8, 0xbbbbbbbb}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000007c0)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[{}, {}], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x2, 0x7, 0x4, 0x0, r1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x3, 0x0, r1}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r12, 0x0, 0x0) (async) r13 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r13, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r14], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000b80)={0x0, 0x4, &(0x7f0000000300)=[r3, r3, r5, r3], &(0x7f0000000340)=[0x2, 0x200, 0xffffa8e0], &(0x7f0000000b00)=[r6, 0x0, r8, 0x0, 0x0, r10, r11, r14], &(0x7f0000000b40)=[0x401, 0xfe00000000000000], 0x0, 0x879e}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4000608e, 0x30801) read$usbfs(r0, 0x0, 0x11) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@dellinkprop={0x19c, 0x6d, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r12, 0x8109, 0x800}, [@IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "99c37cf74656ea1a7611d60ebaf13aa5914a137eae1995a8df0b"}, @IFLA_VF_PORTS={0x128, 0x18, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0x7, 0x2, '&#\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9199b682e1e71fbc2847d7fa52bd0a05"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3ded3d6f7bb84aafaac2134185e0be5"}, @IFLA_PORT_VF={0x8, 0x1, 0x383}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, '{%.\x90@)}\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c7870e63b8f8d9608c68308f2f5f35a4"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2d812842d4110f6aa1afaac27aba60b8"}, @IFLA_PORT_PROFILE={0xf, 0x2, '%^%.\'@#(,-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fe88c0ca23582564f087f5a3216c475d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9149cb13308f6f1f33295cbb6cfac4f9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a2fcf5191b06ac41a65d5db4c8968597"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}, @IFLA_PORT_PROFILE={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'nr0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x100}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8001}, 0x40010) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4000608e, 0x30801) read$usbfs(r0, 0x0, 0x11) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@dellinkprop={0x19c, 0x6d, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r12, 0x8109, 0x800}, [@IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "99c37cf74656ea1a7611d60ebaf13aa5914a137eae1995a8df0b"}, @IFLA_VF_PORTS={0x128, 0x18, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0x7, 0x2, '&#\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9199b682e1e71fbc2847d7fa52bd0a05"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3ded3d6f7bb84aafaac2134185e0be5"}, @IFLA_PORT_VF={0x8, 0x1, 0x383}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, '{%.\x90@)}\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c7870e63b8f8d9608c68308f2f5f35a4"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2d812842d4110f6aa1afaac27aba60b8"}, @IFLA_PORT_PROFILE={0xf, 0x2, '%^%.\'@#(,-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fe88c0ca23582564f087f5a3216c475d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9149cb13308f6f1f33295cbb6cfac4f9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a2fcf5191b06ac41a65d5db4c8968597"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}, @IFLA_PORT_PROFILE={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'nr0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x100}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8001}, 0x40010) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4000608e, 0x30801) read$usbfs(r0, 0x0, 0x11) syz_open_dev$usbfs(&(0x7f0000000000), 0x4000608e, 0x30801) (async) read$usbfs(r0, 0x0, 0x11) (async) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x2, "72626530329fd09948901678efaecb603975f89665db3acfcc33d8fe5087de8a254333b30a03c33a8f4fa53e1229550b3e06d1dd84eb462c201e13ad6d675313f726e0ac02d904f4212ad30d35995ee81e820ae34622eaaaf3fe48975fa77d3ade5c705b179eee378fb04f30967800667c4aff485e8bab8fb36d1c3b86b5e0720b18231b755540e4773a0aae07061799d6bcee39124536d8aafd42f1402c39725da5f15f76be436a736352a92ecc2219f755201feab10511b82767aad68f948c39b17e4d1f22cdd3eb464d2e167324f5893a7bf02e03ab9660db409170a9487ef70ff885364a381dea0b98a55411a8cf00"}) epoll_create(0xa) read$usbfs(r0, 0x0, 0x11) getpgid(0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={0x0, r3, r4, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x9, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000600)={0x0, r7, r8, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r12 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r12, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r11, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[r9, r11, r6, r2], 0x4}) 14:32:03 executing program 3: shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10010, r2, 0x9) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={0x0, r3, r4, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x9, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000600)={0x0, r7, r8, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async, rerun: 32) r12 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r12, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r11, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[r9, r11, r6, r2], 0x4}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x2, "72626530329fd09948901678efaecb603975f89665db3acfcc33d8fe5087de8a254333b30a03c33a8f4fa53e1229550b3e06d1dd84eb462c201e13ad6d675313f726e0ac02d904f4212ad30d35995ee81e820ae34622eaaaf3fe48975fa77d3ade5c705b179eee378fb04f30967800667c4aff485e8bab8fb36d1c3b86b5e0720b18231b755540e4773a0aae07061799d6bcee39124536d8aafd42f1402c39725da5f15f76be436a736352a92ecc2219f755201feab10511b82767aad68f948c39b17e4d1f22cdd3eb464d2e167324f5893a7bf02e03ab9660db409170a9487ef70ff885364a381dea0b98a55411a8cf00"}) (async) epoll_create(0xa) read$usbfs(r0, 0x0, 0x11) getpgid(0x0) 14:32:03 executing program 3: shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10010, r2, 0x9) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x9, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={0x0, r3, r4, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x1, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x9, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000600)={0x0, r7, r8, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) (async) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) r12 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r12, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r11, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[r9, r11, r6, r2], 0x4}) 14:32:03 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) (async) 14:32:03 executing program 3: shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10010, r2, 0x9) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x2, "72626530329fd09948901678efaecb603975f89665db3acfcc33d8fe5087de8a254333b30a03c33a8f4fa53e1229550b3e06d1dd84eb462c201e13ad6d675313f726e0ac02d904f4212ad30d35995ee81e820ae34622eaaaf3fe48975fa77d3ade5c705b179eee378fb04f30967800667c4aff485e8bab8fb36d1c3b86b5e0720b18231b755540e4773a0aae07061799d6bcee39124536d8aafd42f1402c39725da5f15f76be436a736352a92ecc2219f755201feab10511b82767aad68f948c39b17e4d1f22cdd3eb464d2e167324f5893a7bf02e03ab9660db409170a9487ef70ff885364a381dea0b98a55411a8cf00"}) epoll_create(0xa) read$usbfs(r0, 0x0, 0x11) getpgid(0x0) (async) getpgid(0x0) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608f, 0x202000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000100)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000000c0)={r3}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x101042) read$usbfs(r0, 0x0, 0x11) 14:32:03 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608f, 0x202000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000100)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000000c0)={r3}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x101042) read$usbfs(r0, 0x0, 0x11) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608f, 0x202000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000100)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000000c0)={r3}) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600010000040000000000000a000000", @ANYRES32=0x0, @ANYBLOB="01000a00fdffffff"], 0x20}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000340)={"1f0bf11436c4f29c36992b10239898e35e202b492c2f54b632b47c61e41120c1f1cb99f5db598999642a6651d9e965d3fee94976c2ab6dde9663eaf6746d5c67e8b6cb2396daad3feaafbf84e48234e3249dcab1d804a90434576662be4ceafdea2b5f1e9e9d4e9f986aca1f3d8b8e82657ce7aa40925c2d4bb18ff194489b4617dfc11b6aae11b49a5cf243660b1766d48f9fbbd3ec57d1732dca2acf0a73498152859cfad941895b00a93773bd86714fe15569670ba50de20e60d3e4d39417dddc89811ff7ea0b33235ca217a696dc435e7b24b6e843bc6578ad9a39dce36e57b0237806e0b1ea1ec00f1bafc89bce55ba939cdf9c0e5dc80164eec34276a12689405b88221b5d41856e1b0ce42226f0c0f9a6afa2c67258f738107cbc5ad1cb44bff4f697da18a6d9321e2de6f16ded71b6b0ef502b612cb20bc6c050ee0e229f107b725c9ad62e651e4fb44ad6b93c997cdc529ed659d29b8df6a1d8ac983896e9f14760a74c5b3a1fc525a9e9375e35d858cd08e3d136a26a6708940d580fb49360c51b4d2f1f45a70d1bd0436e66677859bdbf389827666161f6dc1bfc34802bda364b1c4cac739eb78ee45a43939ba847e8a3f047f9ed09b4fb6d3bf53f30a2732e8996c182e4dee7c8b0c52dbcceb82820c77282bc0b43206cafaed270e6eecc161b7835ec9d45e2509712c079699ca914a566617560cd600899cfc2a5bd2149f953f18c0662c496e5ff2d175adcc9a67d3dc6c5b1656355a1c9555ae8fa9be1e0469c37e440afef6fbc537a579da348166647cea37285fc7feea0139a9a064435b98da68555506f5269b2c615ba12ffe7b2d2a11377781cfeff9cf6c52daeb3a0453a0df2fdacb08e3abb0ab864e016219b16da01d89b03d6456bda03f82ab3b256a147fb9df344506e670c41582a560b33f9e492093c1c7b77382b24318b0f346bff2348e6eb46e32ac03f9afe3104dedf5050a313d55d0478e1456ef3ba46e5374389b2c40d47408af0a17126dbe3068ab7e27211d5733063f7dd0d7de922d7317c0ddfaf4eaa2c841682620fa1c1b96eedeb63b7c715edc3e09312fe059683562ec1611e98401e8e0a1ea3fa2789559f61d49a6735a96979160af3e35de89e6848f9e90d087bfb37a598b8641f51c9240301b092dbe8cc522baa2b7b15a929c751658fb28e35c51bbdf5ce2e37e5e1431755a8ea4314b2c80bd85055169b21031013268293840121258cb6bed45d5567b893042b0d296de80b864f7759d6aefbb4bdb333f7c8eac8b3584cb9a81a04deb8cdf90664b4943f7c8aab51d39db2a609284ab058f066523074c5a10eddad0ac4d1bed5dc8c1e8fc3f9d684ef7964862cac8bc3d8fb07edb0407a474c874fc8087a2b1c2b15db4ee3ff560586a1fe54b9d628191ff04473d25d4486d6a7e20fcaa3744010458747804a"}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x24a501) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:03 executing program 3: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap$usbfs(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000c, 0x8010, 0xffffffffffffffff, 0x9) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x608c, 0x101042) read$usbfs(r0, 0x0, 0x11) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2468.278274][T27960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 14:32:03 executing program 3: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap$usbfs(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000c, 0x8010, 0xffffffffffffffff, 0x9) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) mmap$usbfs(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000c, 0x8010, 0xffffffffffffffff, 0x9) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) (async) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600010000040000000000000a000000", @ANYRES32=0x0, @ANYBLOB="01000a00fdffffff"], 0x20}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000340)={"1f0bf11436c4f29c36992b10239898e35e202b492c2f54b632b47c61e41120c1f1cb99f5db598999642a6651d9e965d3fee94976c2ab6dde9663eaf6746d5c67e8b6cb2396daad3feaafbf84e48234e3249dcab1d804a90434576662be4ceafdea2b5f1e9e9d4e9f986aca1f3d8b8e82657ce7aa40925c2d4bb18ff194489b4617dfc11b6aae11b49a5cf243660b1766d48f9fbbd3ec57d1732dca2acf0a73498152859cfad941895b00a93773bd86714fe15569670ba50de20e60d3e4d39417dddc89811ff7ea0b33235ca217a696dc435e7b24b6e843bc6578ad9a39dce36e57b0237806e0b1ea1ec00f1bafc89bce55ba939cdf9c0e5dc80164eec34276a12689405b88221b5d41856e1b0ce42226f0c0f9a6afa2c67258f738107cbc5ad1cb44bff4f697da18a6d9321e2de6f16ded71b6b0ef502b612cb20bc6c050ee0e229f107b725c9ad62e651e4fb44ad6b93c997cdc529ed659d29b8df6a1d8ac983896e9f14760a74c5b3a1fc525a9e9375e35d858cd08e3d136a26a6708940d580fb49360c51b4d2f1f45a70d1bd0436e66677859bdbf389827666161f6dc1bfc34802bda364b1c4cac739eb78ee45a43939ba847e8a3f047f9ed09b4fb6d3bf53f30a2732e8996c182e4dee7c8b0c52dbcceb82820c77282bc0b43206cafaed270e6eecc161b7835ec9d45e2509712c079699ca914a566617560cd600899cfc2a5bd2149f953f18c0662c496e5ff2d175adcc9a67d3dc6c5b1656355a1c9555ae8fa9be1e0469c37e440afef6fbc537a579da348166647cea37285fc7feea0139a9a064435b98da68555506f5269b2c615ba12ffe7b2d2a11377781cfeff9cf6c52daeb3a0453a0df2fdacb08e3abb0ab864e016219b16da01d89b03d6456bda03f82ab3b256a147fb9df344506e670c41582a560b33f9e492093c1c7b77382b24318b0f346bff2348e6eb46e32ac03f9afe3104dedf5050a313d55d0478e1456ef3ba46e5374389b2c40d47408af0a17126dbe3068ab7e27211d5733063f7dd0d7de922d7317c0ddfaf4eaa2c841682620fa1c1b96eedeb63b7c715edc3e09312fe059683562ec1611e98401e8e0a1ea3fa2789559f61d49a6735a96979160af3e35de89e6848f9e90d087bfb37a598b8641f51c9240301b092dbe8cc522baa2b7b15a929c751658fb28e35c51bbdf5ce2e37e5e1431755a8ea4314b2c80bd85055169b21031013268293840121258cb6bed45d5567b893042b0d296de80b864f7759d6aefbb4bdb333f7c8eac8b3584cb9a81a04deb8cdf90664b4943f7c8aab51d39db2a609284ab058f066523074c5a10eddad0ac4d1bed5dc8c1e8fc3f9d684ef7964862cac8bc3d8fb07edb0407a474c874fc8087a2b1c2b15db4ee3ff560586a1fe54b9d628191ff04473d25d4486d6a7e20fcaa3744010458747804a"}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x24a501) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:03 executing program 3: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$usbfs(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000c, 0x8010, 0xffffffffffffffff, 0x9) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 64) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) [ 2468.309326][T27979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 14:32:03 executing program 3: epoll_create(0x9) syz_open_dev$usbfs(&(0x7f0000000040), 0xc6bc, 0x8800) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffd, 0x42000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000002c0)) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x2, 0x1, 0x4, 0x3}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000080), &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r4}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) 14:32:03 executing program 3: epoll_create(0x9) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xc6bc, 0x8800) (async) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffd, 0x42000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600010000040000000000000a000000", @ANYRES32=0x0, @ANYBLOB="01000a00fdffffff"], 0x20}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000340)={"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"}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x24a501) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x24a501) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000002c0)) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x2, 0x1, 0x4, 0x3}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000080), &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r4}) 14:32:03 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) keyctl$session_to_parent(0x12) syz_io_uring_setup(0x624f, &(0x7f0000000000)={0x0, 0x9839, 0x10, 0x0, 0x139}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x30fc, &(0x7f0000000140)={0x0, 0xa179, 0x1, 0x2, 0x29}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4000, @fd=r2, 0x0, 0x2, 0x7, 0x5, 0xddcec981febf1963, {0x1}}, 0x80000000) [ 2468.341816][T28000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 14:32:03 executing program 3: epoll_create(0x9) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000000040), 0xc6bc, 0x8800) (async, rerun: 32) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffd, 0x42000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) keyctl$session_to_parent(0x12) (async, rerun: 32) syz_io_uring_setup(0x624f, &(0x7f0000000000)={0x0, 0x9839, 0x10, 0x0, 0x139}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) (async, rerun: 32) syz_io_uring_setup(0x30fc, &(0x7f0000000140)={0x0, 0xa179, 0x1, 0x2, 0x29}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4000, @fd=r2, 0x0, 0x2, 0x7, 0x5, 0xddcec981febf1963, {0x1}}, 0x80000000) 14:32:03 executing program 3: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000002c0)) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x2, 0x1, 0x4, 0x3}) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000080), &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000080), &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r4}) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="5558fdad8e200b2321f37ed35b142377425e32539e7dc175e8e96716c90b00ec34d9bee84ac9119870183f21bbca9f757a82991c8b5d54b206d7a75d05371886d289b5c580f632dd26631429527d0a55ced68ce7789180a873dad4c5ddce5c96d4ff4de655a9b4d80fb7ac2175a5370d7565faeb845ae327e95a7b8b6bb869a92957343aab04541693", 0x89}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000240)={0x0, r4, r5, 0xfffffff9, 0xc00, 0x0, 0x9, 0x8, 0xc0000000, 0x8001, 0x2, 0x5fc3cb61}) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="5558fdad8e200b2321f37ed35b142377425e32539e7dc175e8e96716c90b00ec34d9bee84ac9119870183f21bbca9f757a82991c8b5d54b206d7a75d05371886d289b5c580f632dd26631429527d0a55ced68ce7789180a873dad4c5ddce5c96d4ff4de655a9b4d80fb7ac2175a5370d7565faeb845ae327e95a7b8b6bb869a92957343aab04541693", 0x89}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 32) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000240)={0x0, r4, r5, 0xfffffff9, 0xc00, 0x0, 0x9, 0x8, 0xc0000000, 0x8001, 0x2, 0x5fc3cb61}) 14:32:03 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="8b531a1824926fceedfbfec098aa338322a9957b466c98d90c0a56e49bc313cd5373d4aa8b336e0a7f937566ebe872381cde85e53ea56dad25b00f69b4c4edd32d867e06d355efc8e526701b9852a4bb8b1e3552a67bc9360bb08109fe8c28844a3a72f6857006a7027aec3eb2816a584483a8f5a2dfadee97986393ed4ecc948278c0c2e17dd9cf734227eefe106b748bfd767712ad713d8f8204f36f878b657d426f68d2e3967d", 0xa8) 14:32:03 executing program 3: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) (async, rerun: 64) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (rerun: 64) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:32:03 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) keyctl$session_to_parent(0x12) syz_io_uring_setup(0x624f, &(0x7f0000000000)={0x0, 0x9839, 0x10, 0x0, 0x139}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) syz_io_uring_setup(0x624f, &(0x7f0000000000)={0x0, 0x9839, 0x10, 0x0, 0x139}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x30fc, &(0x7f0000000140)={0x0, 0xa179, 0x1, 0x2, 0x29}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4000, @fd=r2, 0x0, 0x2, 0x7, 0x5, 0xddcec981febf1963, {0x1}}, 0x80000000) 14:32:03 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="8b531a1824926fceedfbfec098aa338322a9957b466c98d90c0a56e49bc313cd5373d4aa8b336e0a7f937566ebe872381cde85e53ea56dad25b00f69b4c4edd32d867e06d355efc8e526701b9852a4bb8b1e3552a67bc9360bb08109fe8c28844a3a72f6857006a7027aec3eb2816a584483a8f5a2dfadee97986393ed4ecc948278c0c2e17dd9cf734227eefe106b748bfd767712ad713d8f8204f36f878b657d426f68d2e3967d", 0xa8) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="8b531a1824926fceedfbfec098aa338322a9957b466c98d90c0a56e49bc313cd5373d4aa8b336e0a7f937566ebe872381cde85e53ea56dad25b00f69b4c4edd32d867e06d355efc8e526701b9852a4bb8b1e3552a67bc9360bb08109fe8c28844a3a72f6857006a7027aec3eb2816a584483a8f5a2dfadee97986393ed4ecc948278c0c2e17dd9cf734227eefe106b748bfd767712ad713d8f8204f36f878b657d426f68d2e3967d", 0xa8) (async) 14:32:03 executing program 3: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async, rerun: 32) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) (rerun: 32) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:32:03 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x3, [0x2, 0x1, 0x8]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 14:32:03 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="8b531a1824926fceedfbfec098aa338322a9957b466c98d90c0a56e49bc313cd5373d4aa8b336e0a7f937566ebe872381cde85e53ea56dad25b00f69b4c4edd32d867e06d355efc8e526701b9852a4bb8b1e3552a67bc9360bb08109fe8c28844a3a72f6857006a7027aec3eb2816a584483a8f5a2dfadee97986393ed4ecc948278c0c2e17dd9cf734227eefe106b748bfd767712ad713d8f8204f36f878b657d426f68d2e3967d", 0xa8) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="8b531a1824926fceedfbfec098aa338322a9957b466c98d90c0a56e49bc313cd5373d4aa8b336e0a7f937566ebe872381cde85e53ea56dad25b00f69b4c4edd32d867e06d355efc8e526701b9852a4bb8b1e3552a67bc9360bb08109fe8c28844a3a72f6857006a7027aec3eb2816a584483a8f5a2dfadee97986393ed4ecc948278c0c2e17dd9cf734227eefe106b748bfd767712ad713d8f8204f36f878b657d426f68d2e3967d", 0xa8) (async) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="5558fdad8e200b2321f37ed35b142377425e32539e7dc175e8e96716c90b00ec34d9bee84ac9119870183f21bbca9f757a82991c8b5d54b206d7a75d05371886d289b5c580f632dd26631429527d0a55ced68ce7789180a873dad4c5ddce5c96d4ff4de655a9b4d80fb7ac2175a5370d7565faeb845ae327e95a7b8b6bb869a92957343aab04541693", 0x89}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000240)={0x0, r4, r5, 0xfffffff9, 0xc00, 0x0, 0x9, 0x8, 0xc0000000, 0x8001, 0x2, 0x5fc3cb61}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000240)={0x0, r4, r5, 0xfffffff9, 0xc00, 0x0, 0x9, 0x8, 0xc0000000, 0x8001, 0x2, 0x5fc3cb61}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x0) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x400300) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x0, 0x9, 0xff, 0x1, 0x1000, 0xe14, &(0x7f0000000100)="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"}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x402c5828, &(0x7f0000000400)={'gre0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x400000000000010b, 0x0, 0x57}) 14:32:03 executing program 2: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x10000000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x46100) r2 = syz_io_uring_setup(0x5317, &(0x7f0000000000)={0x0, 0xaf64, 0x80, 0x1, 0x2ed}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) read$usbfs(r1, 0x0, 0x11) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x1c80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="723ae62d0ece84dcff3c2989f6243afe4a7b3c7671c1d7ea38aea96f88cf4aee30cec6b6aaf834876f28762e875194195f68b9718b2baa780cff8c9b61ac87eacce6dec2b40ac14a02c4e8ef272a10a407655899eb23f1ec65c0717262899f36d8bc81795a640325aeb48cdb493ce0262ba29f070bd40c210eb3d3c8a67e96cee6c6746d80eb11a02e2b0deb3ad04a1efb18562e7d99bb5329ab88d54a060a1822f9f5d549251596953f", 0xaa}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x400300) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x0, 0x9, 0xff, 0x1, 0x1000, 0xe14, &(0x7f0000000100)="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"}) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x400300) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x0, 0x9, 0xff, 0x1, 0x1000, 0xe14, &(0x7f0000000100)="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"}) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="7f50800000000003000000094b56006c006800000729907864010101e00000028307000000000044106e00000100010001000000000002070ff60a010102ac1414bbac1414080004010000892b2f7f00000164010102ffffffff64010100ffffffff0000000000000000ac1e01017f000001ac1414380000"]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r1}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) getpeername$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r11, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r11, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91812}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)=ANY=[@ANYBLOB="f0010000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c01028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f7ffffff080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f737461010000006566726573685f696e74657276616c000000000000000500030003000000080004000000000040000100240001006d6f646534594b73000000000000f0a7bf2ee468f37dc54f7363d5c136fc0000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x1f0}, 0x1, 0x0, 0x0, 0x4000088}, 0x8080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r24}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffdff6) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x402c5828, &(0x7f0000000400)={'gre0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x400000000000010b, 0x0, 0x57}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000100)) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000040)=""/1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "111c06022cda4861bd656b9e6ea3d21e661571e52dfd678a660d178eb69959c6"}) pipe2$watch_queue(&(0x7f0000000080), 0x80) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="7f50800000000003000000094b56006c006800000729907864010101e00000028307000000000044106e00000100010001000000000002070ff60a010102ac1414bbac1414080004010000892b2f7f00000164010102ffffffff64010100ffffffff0000000000000000ac1e01017f000001ac1414380000"]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="7f50800000000003000000094b56006c006800000729907864010101e00000028307000000000044106e00000100010001000000000002070ff60a010102ac1414bbac1414080004010000892b2f7f00000164010102ffffffff64010100ffffffff0000000000000000ac1e01017f000001ac1414380000"]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r1}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) getpeername$packet(r11, &(0x7f0000000280), &(0x7f00000002c0)=0x14) (async) getpeername$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r11, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r11, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000008c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91812}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)=ANY=[@ANYBLOB="f0010000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c01028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f7ffffff080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f737461010000006566726573685f696e74657276616c000000000000000500030003000000080004000000000040000100240001006d6f646534594b73000000000000f0a7bf2ee468f37dc54f7363d5c136fc0000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x1f0}, 0x1, 0x0, 0x0, 0x4000088}, 0x8080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r24}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r24}) 14:32:03 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000100)) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000040)=""/1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "111c06022cda4861bd656b9e6ea3d21e661571e52dfd678a660d178eb69959c6"}) pipe2$watch_queue(&(0x7f0000000080), 0x80) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000100)) (async) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) (async) shmctl$IPC_RMID(r2, 0x0) (async) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000040)=""/1) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "111c06022cda4861bd656b9e6ea3d21e661571e52dfd678a660d178eb69959c6"}) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) 14:32:03 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="7f50800000000003000000094b56006c006800000729907864010101e00000028307000000000044106e00000100010001000000000002070ff60a010102ac1414bbac1414080004010000892b2f7f00000164010102ffffffff64010100ffffffff0000000000000000ac1e01017f000001ac1414380000"]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r1}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) getpeername$packet(r11, &(0x7f0000000280), &(0x7f00000002c0)=0x14) (async) getpeername$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r11, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) getpeername$packet(r11, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r11, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91812}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)=ANY=[@ANYBLOB="f0010000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c01028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f7ffffff080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f737461010000006566726573685f696e74657276616c000000000000000500030003000000080004000000000040000100240001006d6f646534594b73000000000000f0a7bf2ee468f37dc54f7363d5c136fc0000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x1f0}, 0x1, 0x0, 0x0, 0x4000088}, 0x8080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r24}) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x402c5828, &(0x7f0000000400)={'gre0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x400000000000010b, 0x0, 0x57}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000100)) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000100)) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) (async) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000040)=""/1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "111c06022cda4861bd656b9e6ea3d21e661571e52dfd678a660d178eb69959c6"}) pipe2$watch_queue(&(0x7f0000000080), 0x80) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000100)) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000040)=""/1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "111c06022cda4861bd656b9e6ea3d21e661571e52dfd678a660d178eb69959c6"}) pipe2$watch_queue(&(0x7f0000000080), 0x80) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x3e, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[r1, 0x0], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01464ba, &(0x7f0000000080)={0x0, 0x0, r1, 0xcccccccc}) 14:32:03 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffbfff20) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x3e, 0x1}) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[r1, 0x0], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01464ba, &(0x7f0000000080)={0x0, 0x0, r1, 0xcccccccc}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000080)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x81) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x3e, 0x1}) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[r1, 0x0], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01464ba, &(0x7f0000000080)={0x0, 0x0, r1, 0xcccccccc}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01464ba, &(0x7f0000000080)={0x0, 0x0, r1, 0xcccccccc}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf6bfffff) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000080)) (async, rerun: 64) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x81) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 14:32:03 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) mmap$snddsp_status(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x5ed43d42d99d0796, 0xffffffffffffffff, 0x82000000) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000080)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x81) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x20ffbfff) 14:32:03 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 14:32:03 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) mmap$snddsp_status(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x5ed43d42d99d0796, 0xffffffffffffffff, 0x82000000) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000340)={r2, r3, r4, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0]}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x3e75) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, r6, 0xfc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESDEC, @ANYBLOB="01002bbd7000fcdbdf253100000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0000005c", @ANYRES8=0x0], 0x4c}}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r8, 0x0, 0x0) r9 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000240)=[0x0], &(0x7f0000000580)=[{}, {}, {}], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000200)=[0x0, r10], 0x2, 0x800, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) ioctl$sock_bt_cmtp_CMTPCONNADD(r11, 0x400443c8, &(0x7f0000000280)={r4, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd7000fddbdf253100000008000100520200000c00990000010000270000f844a0000800000000000000087de0558b3ee355463bc8bc9a1c41629884bfe2dcc36fccd6f139ade3f02d8ad22a8a4d068ea436405bdb7fd0800130cc63c264fa45bded140d510b029b11200f374859180973d53c9ddffd9d1240c3a015d0b31444b98439dc11124e1908d75fba4bb9524f15030da3dfa9ffea4f9b30de56e0e8f0668d", @ANYRES32=r7, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32=r8, @ANYBLOB="0c00b9289d00000008070807", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf253100000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0000005c"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400086}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x6d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r14 = openat$hwrng(0xffffff9c, &(0x7f0000000500), 0x181000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000007, 0x20010, r14, 0xf15d) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xc0ff20) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) mmap$snddsp_status(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x5ed43d42d99d0796, 0xffffffffffffffff, 0x82000000) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x5, 0x5}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000340)={r2, r3, r4, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0]}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x3e75) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, r6, 0xfc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESDEC, @ANYBLOB="01002bbd7000fcdbdf253100000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0000005c", @ANYRES8=0x0], 0x4c}}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r8, 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) r9 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000240)=[0x0], &(0x7f0000000580)=[{}, {}, {}], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000200)=[0x0, r10], 0x2, 0x800, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) ioctl$sock_bt_cmtp_CMTPCONNADD(r11, 0x400443c8, &(0x7f0000000280)={r4, 0x1}) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r11, 0x400443c8, &(0x7f0000000280)={r4, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd7000fddbdf253100000008000100520200000c00990000010000270000f844a0000800000000000000087de0558b3ee355463bc8bc9a1c41629884bfe2dcc36fccd6f139ade3f02d8ad22a8a4d068ea436405bdb7fd0800130cc63c264fa45bded140d510b029b11200f374859180973d53c9ddffd9d1240c3a015d0b31444b98439dc11124e1908d75fba4bb9524f15030da3dfa9ffea4f9b30de56e0e8f0668d", @ANYRES32=r7, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32=r8, @ANYBLOB="0c00b9289d00000008070807", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd7000fddbdf253100000008000100520200000c00990000010000270000f844a0000800000000000000087de0558b3ee355463bc8bc9a1c41629884bfe2dcc36fccd6f139ade3f02d8ad22a8a4d068ea436405bdb7fd0800130cc63c264fa45bded140d510b029b11200f374859180973d53c9ddffd9d1240c3a015d0b31444b98439dc11124e1908d75fba4bb9524f15030da3dfa9ffea4f9b30de56e0e8f0668d", @ANYRES32=r7, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32=r8, @ANYBLOB="0c00b9289d00000008070807", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf253100000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0000005c"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400086}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x6d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r14 = openat$hwrng(0xffffff9c, &(0x7f0000000500), 0x181000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000007, 0x20010, r14, 0xf15d) (async) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000007, 0x20010, r14, 0xf15d) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x700) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) r1 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000040)={r6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000001c0)={r6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r12 = syz_open_dev$dri(&(0x7f0000000200), 0x400, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000005c0)="833d26fed3251a6159be38af1380434c21c5f98cd5a834694583439cba504330349987aa48d714ce00642fa2a8712db5d88e295f7161dc8bdc4f766df71d2e26b99300ac4c58fac9c052ac0f12fa3c39ea24051b9c12bd741027bc1f046e29e1a4a49392724875e12114a264862db2a71c35a889619772506c361c97d133c1ebbf6fe63d2b75f698925f94eedba5604943e94e384e83a2d64159be31c0db4e8492f2135a91f3158023b36a9214fb947773dc87c402dc07d4b0e199db741acd5c50cf997842332de08cd83eabf8a6f78e75727d7ec748bb6eb0a8f55fec3278acbca3c73aa9832a510308c283ba78a08c39508f8021fec49d", 0xf8, 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r14, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r14, 0x0, 0x0) r15 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r15, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r14, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r16], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x5, 0x2, 0xa, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, r7, r7, r13, r8, r16, r17, r11, r10], 0x9, 0x80000}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xcccccccc}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r18, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r18, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x80, 0x7d456c36b4149a13, 0x1, 0xff, 0x1f, 0x5, &(0x7f0000000000)="24260d39fdbdb333f0cb5b71c75fd5d65844b0b8264549e836140967cc66c9"}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000/0x1000)=nil}) read$usbfs(r0, 0x0, 0x11) syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x40100) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000340)={r2, r3, r4, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0]}) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000040)={r6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000001c0)={r6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r9, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) r12 = syz_open_dev$dri(&(0x7f0000000200), 0x400, 0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000005c0)="833d26fed3251a6159be38af1380434c21c5f98cd5a834694583439cba504330349987aa48d714ce00642fa2a8712db5d88e295f7161dc8bdc4f766df71d2e26b99300ac4c58fac9c052ac0f12fa3c39ea24051b9c12bd741027bc1f046e29e1a4a49392724875e12114a264862db2a71c35a889619772506c361c97d133c1ebbf6fe63d2b75f698925f94eedba5604943e94e384e83a2d64159be31c0db4e8492f2135a91f3158023b36a9214fb947773dc87c402dc07d4b0e199db741acd5c50cf997842332de08cd83eabf8a6f78e75727d7ec748bb6eb0a8f55fec3278acbca3c73aa9832a510308c283ba78a08c39508f8021fec49d", 0xf8, 0x0}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r14, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r14, 0x0, 0x0) (async) r15 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r15, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r14, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r16], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x5, 0x2, 0xa, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, r7, r7, r13, r8, r16, r17, r11, r10], 0x9, 0x80000}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xcccccccc}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r18, 0x0, 0x0) (async) ioctl$UFFDIO_CONTINUE(r18, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x3e75) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, r6, 0xfc) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESDEC, @ANYBLOB="01002bbd7000fcdbdf253100000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0000005c", @ANYRES8=0x0], 0x4c}}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r8, 0x0, 0x0) (async) r9 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000240)=[0x0], &(0x7f0000000580)=[{}, {}, {}], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000200)=[0x0, r10], 0x2, 0x800, 0x0, 0xffffffffffffffff}) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) ioctl$sock_bt_cmtp_CMTPCONNADD(r11, 0x400443c8, &(0x7f0000000280)={r4, 0x1}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd7000fddbdf253100000008000100520200000c00990000010000270000f844a0000800000000000000087de0558b3ee355463bc8bc9a1c41629884bfe2dcc36fccd6f139ade3f02d8ad22a8a4d068ea436405bdb7fd0800130cc63c264fa45bded140d510b029b11200f374859180973d53c9ddffd9d1240c3a015d0b31444b98439dc11124e1908d75fba4bb9524f15030da3dfa9ffea4f9b30de56e0e8f0668d", @ANYRES32=r7, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32=r8, @ANYBLOB="0c00b9289d00000008070807", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf253100000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0000005c"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400086}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x6d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r14 = openat$hwrng(0xffffff9c, &(0x7f0000000500), 0x181000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000007, 0x20010, r14, 0xf15d) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffcfff20, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) r1 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000040)={r6}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000040)={r6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000001c0)={r6}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000001c0)={r6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) syz_open_dev$dri(&(0x7f0000000200), 0x400, 0x80000) (async) r12 = syz_open_dev$dri(&(0x7f0000000200), 0x400, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000005c0)="833d26fed3251a6159be38af1380434c21c5f98cd5a834694583439cba504330349987aa48d714ce00642fa2a8712db5d88e295f7161dc8bdc4f766df71d2e26b99300ac4c58fac9c052ac0f12fa3c39ea24051b9c12bd741027bc1f046e29e1a4a49392724875e12114a264862db2a71c35a889619772506c361c97d133c1ebbf6fe63d2b75f698925f94eedba5604943e94e384e83a2d64159be31c0db4e8492f2135a91f3158023b36a9214fb947773dc87c402dc07d4b0e199db741acd5c50cf997842332de08cd83eabf8a6f78e75727d7ec748bb6eb0a8f55fec3278acbca3c73aa9832a510308c283ba78a08c39508f8021fec49d", 0xf8, 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r14, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r14, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) (async) r15 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r15, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r14, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r16], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x5, 0x2, 0xa, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, r7, r7, r13, r8, r16, r17, r11, r10], 0x9, 0x80000}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xcccccccc}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xcccccccc}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r18, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r18, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async) ioctl$UFFDIO_CONTINUE(r18, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc4c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf000000, 0x12, r0, 0x0) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc4c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:03 executing program 1: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x7f}, 0xa) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x10, 0x80, 0x10000005, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x66, 0x0, 0xff, 0x2f, 0x0, @remote, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x7, 0xbd, [@local]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001c40)={0x88c, 0x0, 0x30, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5b3, 0x81, 0x2d, 0x8001}, {0x0, 0x8, 0x9, 0xb4}, {0x99, 0x2, 0x3f, 0x20}, {0x29ba, 0x7, 0x8, 0x1ff}]}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1f1db5eb8571e7e8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_dellink={0x3c, 0x11, 0x20, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x0, 0x402}, [@IFLA_PHYS_PORT_ID={0x12, 0x22, "d227e686dcb45d7f454ecab88c24"}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x41880) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wlan1\x00'}) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x60148090}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r16, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x18, 0x1402, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$packet(0x11, 0x3, 0x300) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf000000, 0x12, r0, 0x0) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc4c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5000000, 0x12, r0, 0x0) 14:32:03 executing program 1: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x7f}, 0xa) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x10, 0x80, 0x10000005, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x66, 0x0, 0xff, 0x2f, 0x0, @remote, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x7, 0xbd, [@local]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001c40)={0x88c, 0x0, 0x30, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5b3, 0x81, 0x2d, 0x8001}, {0x0, 0x8, 0x9, 0xb4}, {0x99, 0x2, 0x3f, 0x20}, {0x29ba, 0x7, 0x8, 0x1ff}]}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) (async) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1f1db5eb8571e7e8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_dellink={0x3c, 0x11, 0x20, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x0, 0x402}, [@IFLA_PHYS_PORT_ID={0x12, 0x22, "d227e686dcb45d7f454ecab88c24"}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x41880) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1f1db5eb8571e7e8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_dellink={0x3c, 0x11, 0x20, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x0, 0x402}, [@IFLA_PHYS_PORT_ID={0x12, 0x22, "d227e686dcb45d7f454ecab88c24"}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x41880) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wlan1\x00'}) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x60148090}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x60148090}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r16, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x18, 0x1402, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$RDMA_NLDEV_CMD_SET(r16, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x18, 0x1402, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$packet(0x11, 0x3, 0x300) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x1) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe00, 0x12, r0, 0x0) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) (async) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x1) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x5, 0x2, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:03 executing program 1: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x7f}, 0xa) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x10, 0x80, 0x10000005, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x66, 0x0, 0xff, 0x2f, 0x0, @remote, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x7, 0xbd, [@local]}, @noop]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001c40)={0x88c, 0x0, 0x30, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5b3, 0x81, 0x2d, 0x8001}, {0x0, 0x8, 0x9, 0xb4}, {0x99, 0x2, 0x3f, 0x20}, {0x29ba, 0x7, 0x8, 0x1ff}]}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1f1db5eb8571e7e8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_dellink={0x3c, 0x11, 0x20, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x0, 0x402}, [@IFLA_PHYS_PORT_ID={0x12, 0x22, "d227e686dcb45d7f454ecab88c24"}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x41880) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wlan1\x00'}) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x60148090}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r16, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x18, 0x1402, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) socket$packet(0x11, 0x3, 0x300) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd00, 0x12, r0, 0x0) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) (async) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x1) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async, rerun: 32) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x5, 0x2, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300, 0x12, r0, 0x0) 14:32:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x20, 0x40, 0x8, 0x20, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0x54, 0x86, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x8}, {@multicast1, 0x9}, {@rand_addr=0x64010100, 0x4}, {@private=0xa010100, 0x9}, {@empty, 0xfff}, {@multicast1, 0x3f}, {@empty, 0x5}, {@local, 0x7}, {@empty, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @end]}}}}}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) getpeername$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r10, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r10, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r14}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x8, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x2, 0x2, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@cipso={0x86, 0x2e, 0x3, [{0x5, 0x12, "1309a13289711c1395c60b7f7a7f924c"}, {0x5, 0xc, "bb4b40b52ca662b0324e"}, {0x2, 0xa, "ce110ef2b231f04e"}]}, @timestamp={0x44, 0x24, 0x38, 0x0, 0x9, [0x0, 0x9279, 0x15dd04ec, 0xffffffe0, 0x8, 0x3f, 0x5, 0x5]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x450, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x4}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0xfe, 0x36, 0x401}, {0x8, 0x2, 0x1f, 0x2}, {0x8, 0x81, 0xff, 0x8}, {0xfff7, 0x0, 0xe9, 0x70}, {0x8, 0x3f, 0x0, 0x2}, {0x6f7, 0xca, 0x3b, 0x4}, {0x5, 0x6, 0x1b, 0x4}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r23}, {0x1c8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x400, 0x4, 0x40, 0xa82}, {0x1, 0x7, 0x28, 0x7}, {0x7, 0x8, 0x1, 0x6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 14:32:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x800) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x5, 0x2, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x800) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x20, 0x40, 0x8, 0x20, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0x54, 0x86, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x8}, {@multicast1, 0x9}, {@rand_addr=0x64010100, 0x4}, {@private=0xa010100, 0x9}, {@empty, 0xfff}, {@multicast1, 0x3f}, {@empty, 0x5}, {@local, 0x7}, {@empty, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @end]}}}}}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) getpeername$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r10, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async, rerun: 64) getpeername$packet(r10, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r14}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x8, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x2, 0x2, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@cipso={0x86, 0x2e, 0x3, [{0x5, 0x12, "1309a13289711c1395c60b7f7a7f924c"}, {0x5, 0xc, "bb4b40b52ca662b0324e"}, {0x2, 0xa, "ce110ef2b231f04e"}]}, @timestamp={0x44, 0x24, 0x38, 0x0, 0x9, [0x0, 0x9279, 0x15dd04ec, 0xffffffe0, 0x8, 0x3f, 0x5, 0x5]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x450, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x4}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0xfe, 0x36, 0x401}, {0x8, 0x2, 0x1f, 0x2}, {0x8, 0x81, 0xff, 0x8}, {0xfff7, 0x0, 0xe9, 0x70}, {0x8, 0x3f, 0x0, 0x2}, {0x6f7, 0xca, 0x3b, 0x4}, {0x5, 0x6, 0x1b, 0x4}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r23}, {0x1c8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x400, 0x4, 0x40, 0xa82}, {0x1, 0x7, 0x28, 0x7}, {0x7, 0x8, 0x1, 0x6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x12, r0, 0x0) 14:32:04 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r0}) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x800) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x110, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x800) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 14:32:04 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r0}) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x20, 0x40, 0x8, 0x20, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0x54, 0x86, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x8}, {@multicast1, 0x9}, {@rand_addr=0x64010100, 0x4}, {@private=0xa010100, 0x9}, {@empty, 0xfff}, {@multicast1, 0x3f}, {@empty, 0x5}, {@local, 0x7}, {@empty, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @end]}}}}}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) (async) getpeername$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async, rerun: 64) getpeername$packet(r10, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async, rerun: 32) getpeername$packet(r10, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r14}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x8, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x2, 0x2, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@cipso={0x86, 0x2e, 0x3, [{0x5, 0x12, "1309a13289711c1395c60b7f7a7f924c"}, {0x5, 0xc, "bb4b40b52ca662b0324e"}, {0x2, 0xa, "ce110ef2b231f04e"}]}, @timestamp={0x44, 0x24, 0x38, 0x0, 0x9, [0x0, 0x9279, 0x15dd04ec, 0xffffffe0, 0x8, 0x3f, 0x5, 0x5]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x450, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x4}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0xfe, 0x36, 0x401}, {0x8, 0x2, 0x1f, 0x2}, {0x8, 0x81, 0xff, 0x8}, {0xfff7, 0x0, 0xe9, 0x70}, {0x8, 0x3f, 0x0, 0x2}, {0x6f7, 0xca, 0x3b, 0x4}, {0x5, 0x6, 0x1b, 0x4}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r23}, {0x1c8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x400, 0x4, 0x40, 0xa82}, {0x1, 0x7, 0x28, 0x7}, {0x7, 0x8, 0x1, 0x6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r2, 0x9) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000080)={0xc3, 0x36, 0x101, 0x3ff, 0xf4, 0xfb, &(0x7f0000000100)="8e255670e5751930f9d36ea697e189269c4a0829b5eaa6a1d1b7077dc3983f1e61e6dea82140ecef1caf24bff15f84a38d4fd47eab67659b4787fa95b938e48fafd543d93fdba72cc9ad3242a99a38878fd3a238fba8daa893f6c5d687aefcff22d3c23c23b163862651d2171c5cbfa2c6f8d39587a6a3bcda57c1a031b1324730c113e537a51e1cff1033003210bcc2a211777571e6de48d9252cf930531191cf549ad4c6c63ff5845ab0ea2fb41179b933402ce165a9122688613aa96a6e6f501699c2735be982deba109b91050f887bb99ecec9e52107ae68c8d0aa78558bde780e9b5d21fcc78367a095f6f8f0bd8dfcc957"}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x1010, r1, 0xe388f000) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x800000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES16=0x0]) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001, 0x13, 0xffffffffffffffff, 0xd0a) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x0) 14:32:04 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r0}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r2, 0x9) (async) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000080)={0xc3, 0x36, 0x101, 0x3ff, 0xf4, 0xfb, &(0x7f0000000100)="8e255670e5751930f9d36ea697e189269c4a0829b5eaa6a1d1b7077dc3983f1e61e6dea82140ecef1caf24bff15f84a38d4fd47eab67659b4787fa95b938e48fafd543d93fdba72cc9ad3242a99a38878fd3a238fba8daa893f6c5d687aefcff22d3c23c23b163862651d2171c5cbfa2c6f8d39587a6a3bcda57c1a031b1324730c113e537a51e1cff1033003210bcc2a211777571e6de48d9252cf930531191cf549ad4c6c63ff5845ab0ea2fb41179b933402ce165a9122688613aa96a6e6f501699c2735be982deba109b91050f887bb99ecec9e52107ae68c8d0aa78558bde780e9b5d21fcc78367a095f6f8f0bd8dfcc957"}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x1010, r1, 0xe388f000) (async) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x800000) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES16=0x0]) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001, 0x13, 0xffffffffffffffff, 0xd0a) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x0) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0}) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="4216c632607f085ae43226cd06dcb3bbb3db", 0x12, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x7, 0x2, 0x1, 0x2}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r8, 0xbbbbbbbb}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r12], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000340)={0x400, 0x6, &(0x7f0000000240)=[r2, r1, r3, r1, r6, r8], &(0x7f0000000280)=[0xd33, 0x665, 0x4, 0xebec], &(0x7f00000002c0)=[r12, 0x0, 0x0], &(0x7f0000000300)=[0x800], 0x0, 0x2}) 14:32:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0}) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r2, 0x9) (async) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000080)={0xc3, 0x36, 0x101, 0x3ff, 0xf4, 0xfb, &(0x7f0000000100)="8e255670e5751930f9d36ea697e189269c4a0829b5eaa6a1d1b7077dc3983f1e61e6dea82140ecef1caf24bff15f84a38d4fd47eab67659b4787fa95b938e48fafd543d93fdba72cc9ad3242a99a38878fd3a238fba8daa893f6c5d687aefcff22d3c23c23b163862651d2171c5cbfa2c6f8d39587a6a3bcda57c1a031b1324730c113e537a51e1cff1033003210bcc2a211777571e6de48d9252cf930531191cf549ad4c6c63ff5845ab0ea2fb41179b933402ce165a9122688613aa96a6e6f501699c2735be982deba109b91050f887bb99ecec9e52107ae68c8d0aa78558bde780e9b5d21fcc78367a095f6f8f0bd8dfcc957"}) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x1010, r1, 0xe388f000) (rerun: 64) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x800000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES16=0x0]) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001, 0x13, 0xffffffffffffffff, 0xd0a) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x0) 14:32:04 executing program 2: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="4216c632607f085ae43226cd06dcb3bbb3db", 0x12, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x7, 0x2, 0x1, 0x2}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) (async) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r8, 0xbbbbbbbb}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) (async) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r12], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000340)={0x400, 0x6, &(0x7f0000000240)=[r2, r1, r3, r1, r6, r8], &(0x7f0000000280)=[0xd33, 0x665, 0x4, 0xebec], &(0x7f00000002c0)=[r12, 0x0, 0x0], &(0x7f0000000300)=[0x800], 0x0, 0x2}) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x0, 0x0}) 14:32:04 executing program 3: ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xa2e, 0x0, 0x800}]}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 2: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="4216c632607f085ae43226cd06dcb3bbb3db", 0x12, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x7, 0x2, 0x1, 0x2}) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r6], 0x1, 0x80800}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r8, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r8, 0xbbbbbbbb}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r12], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000340)={0x400, 0x6, &(0x7f0000000240)=[r2, r1, r3, r1, r6, r8], &(0x7f0000000280)=[0xd33, 0x665, 0x4, 0xebec], &(0x7f00000002c0)=[r12, 0x0, 0x0], &(0x7f0000000300)=[0x800], 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000340)={0x400, 0x6, &(0x7f0000000240)=[r2, r1, r3, r1, r6, r8], &(0x7f0000000280)=[0xd33, 0x665, 0x4, 0xebec], &(0x7f00000002c0)=[r12, 0x0, 0x0], &(0x7f0000000300)=[0x800], 0x0, 0x2}) 14:32:04 executing program 2: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 3: ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xa2e, 0x0, 0x800}]}) (async, rerun: 32) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (rerun: 32) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 14:32:04 executing program 3: ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xa2e, 0x0, 0x800}]}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 1: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r16, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000019c0)=ANY=[@ANYBLOB="f8070000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r6, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000200ff045900000008000100", @ANYRES32=r8, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040031ffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c656400f9000000000000000000000000000005000304060000837ae3c70008000600"/56, @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESHEX=r16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000b8080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005000201ff07000003002080010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008600000008000600", @ANYRES32=r14, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r15, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB], 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@mpls_newroute={0xb4, 0x18, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c, 0xb8, 0x14, 0x1, 0x0, 0x2, 0xc8, 0x9, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x98, 0x32, 0x4c, r2}}, @RTA_NEWDST={0x84, 0x13, [{0xff, 0x0, 0x1}, {0xe6, 0x0, 0x1}, {0x5}, {0x9, 0x0, 0x1}, {0xdcae}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3}, {0x6, 0x0, 0x1}, {}, {0xfff5f}, {0xbb}, {0x5}, {}, {0x5}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}, {0x7}, {0x7fff, 0x0, 0x1}, {0x240, 0x0, 0x1}, {0x5}, {0x8001}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xfff52}, {0x3f, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r12}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x44, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0xd000201a}, r0, 0x1, 0x0, 0x1}, 0x5) syz_open_dev$dri(&(0x7f0000000000), 0x10000, 0x4000) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r17, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r17, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x400) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x8002) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x9, 0x80010, 0xffffffffffffffff, 0x82000000) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x400) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) 14:32:04 executing program 1: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r16, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000019c0)=ANY=[@ANYBLOB="f8070000", @ANYRES16=0x0, @ANYBLOB="30002abd0000020800010016374606d1b7b400918381e1710100007fb2472520a87acace55f9ce0f61edd394866d2e7bbb368f61f392a4ba87a564a9add7dc206e5ddf03b944885d44decfec7fa55bc803a198734d9530590ad882979ff5e19f02fceb265dff3f148e9868c883e10910736ca6b3f936c7ed421b546c1f9eef0c43b52ee543baa900000072ec5a059844f08300ead850e14ea6c3291164acc0911a7a1b6c2ed6e3b694a0d6a75390b4724cbb37a1bdf1310d81730791a27fd76d84808d7fcc1b04745b1f6c1830a12a663af032988e9088dc4b6be4aa48dd954e0074c58ffa88d6ac96090000003324a302cd5ed622ad30b3b2ef9a5109a782269a07590de925498a284d14b6ef186ec58ea24879b395983750d89f5a5c00edd9454e7872c65d13e8532056df5a4aabc9f56b2ab6c64eea", @ANYRES32=r5, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r6, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000200ff045900000008000100", @ANYRES32=r8, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040031ffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c656400f9000000000000000000000000000005000304060000837ae3c70008000600"/56, @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESHEX=r16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000b8080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005000201ff07000003002080010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008600000008000600", @ANYRES32=r14, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r15, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB], 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000019c0)=ANY=[@ANYBLOB="f8070000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r6, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000200ff045900000008000100", @ANYRES32=r8, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040031ffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c656400f9000000000000000000000000000005000304060000837ae3c70008000600"/56, @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESHEX=r16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000b8080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005000201ff07000003002080010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008600000008000600", @ANYRES32=r14, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r15, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB], 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@mpls_newroute={0xb4, 0x18, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c, 0xb8, 0x14, 0x1, 0x0, 0x2, 0xc8, 0x9, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x98, 0x32, 0x4c, r2}}, @RTA_NEWDST={0x84, 0x13, [{0xff, 0x0, 0x1}, {0xe6, 0x0, 0x1}, {0x5}, {0x9, 0x0, 0x1}, {0xdcae}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3}, {0x6, 0x0, 0x1}, {}, {0xfff5f}, {0xbb}, {0x5}, {}, {0x5}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}, {0x7}, {0x7fff, 0x0, 0x1}, {0x240, 0x0, 0x1}, {0x5}, {0x8001}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xfff52}, {0x3f, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r12}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x44, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0xd000201a}, r0, 0x1, 0x0, 0x1}, 0x5) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x44, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0xd000201a}, r0, 0x1, 0x0, 0x1}, 0x5) syz_open_dev$dri(&(0x7f0000000000), 0x10000, 0x4000) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r17, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r17, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r17, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r17, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x8002) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x9, 0x80010, 0xffffffffffffffff, 0x82000000) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000300)={0x0, 0x0, r2, 0x8000, 0x7fffffff, 0x0, 0x30b, 0x7fffffff, 0x9, 0x3, 0x6, 0x7f00}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0xa, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 1: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980), &(0x7f00000009c0)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r16, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000019c0)=ANY=[@ANYBLOB="f8070000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r6, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000200ff045900000008000100", @ANYRES32=r8, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040031ffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c656400f9000000000000000000000000000005000304060000837ae3c70008000600"/56, @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESHEX=r16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000b8080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005000201ff07000003002080010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008600000008000600", @ANYRES32=r14, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r15, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB], 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@mpls_newroute={0xb4, 0x18, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c, 0xb8, 0x14, 0x1, 0x0, 0x2, 0xc8, 0x9, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x98, 0x32, 0x4c, r2}}, @RTA_NEWDST={0x84, 0x13, [{0xff, 0x0, 0x1}, {0xe6, 0x0, 0x1}, {0x5}, {0x9, 0x0, 0x1}, {0xdcae}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3}, {0x6, 0x0, 0x1}, {}, {0xfff5f}, {0xbb}, {0x5}, {}, {0x5}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}, {0x7}, {0x7fff, 0x0, 0x1}, {0x240, 0x0, 0x1}, {0x5}, {0x8001}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xfff52}, {0x3f, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r12}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@mpls_newroute={0xb4, 0x18, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c, 0xb8, 0x14, 0x1, 0x0, 0x2, 0xc8, 0x9, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x98, 0x32, 0x4c, r2}}, @RTA_NEWDST={0x84, 0x13, [{0xff, 0x0, 0x1}, {0xe6, 0x0, 0x1}, {0x5}, {0x9, 0x0, 0x1}, {0xdcae}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3}, {0x6, 0x0, 0x1}, {}, {0xfff5f}, {0xbb}, {0x5}, {}, {0x5}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}, {0x7}, {0x7fff, 0x0, 0x1}, {0x240, 0x0, 0x1}, {0x5}, {0x8001}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xfff52}, {0x3f, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r12}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x44, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0xd000201a}, r0, 0x1, 0x0, 0x1}, 0x5) syz_open_dev$dri(&(0x7f0000000000), 0x10000, 0x4000) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r17, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r17, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x8002) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) (async, rerun: 32) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x9, 0x80010, 0xffffffffffffffff, 0x82000000) (rerun: 32) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000300)={0x0, 0x0, r2, 0x8000, 0x7fffffff, 0x0, 0x30b, 0x7fffffff, 0x9, 0x3, 0x6, 0x7f00}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0xa, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000180)=""/99, &(0x7f0000000200)=0x63) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000300)={0x0, 0x0, r2, 0x8000, 0x7fffffff, 0x0, 0x30b, 0x7fffffff, 0x9, 0x3, 0x6, 0x7f00}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0xa, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x9) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 14:32:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000180)=""/99, &(0x7f0000000200)=0x63) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x9) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x141201) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000180)=""/99, &(0x7f0000000200)=0x63) (async) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x9) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x141201) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x141201) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000000c0)) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "116322260d773c43ce63c501a6d38360d3f807000000000000001be39181662d"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x4}}, 0x20) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x141201) openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000000c0)) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "116322260d773c43ce63c501a6d38360d3f807000000000000001be39181662d"}) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x4}}, 0x20) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000140), &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000040)={0x4, 0x0, r1, 0xc0c0c0c0}) r6 = openat$tun(0xffffff9c, &(0x7f0000000140), 0xc8780, 0x0) r7 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "116322260d773c43ce63c501a6d38360d3f807000000000000001be39181662d"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x4}}, 0x20) (async, rerun: 64) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000140), &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000040)={0x4, 0x0, r1, 0xc0c0c0c0}) (async) r6 = openat$tun(0xffffff9c, &(0x7f0000000140), 0xc8780, 0x0) r7 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000000c0)) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) 14:32:04 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000140), &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) (async) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000040)={0x4, 0x0, r1, 0xc0c0c0c0}) (async) r6 = openat$tun(0xffffff9c, &(0x7f0000000140), 0xc8780, 0x0) r7 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x3}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/202, 0xca, 0x0, &(0x7f00000001c0)=""/236, 0xec}, &(0x7f0000000300)=0x40) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x3}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/202, 0xca, 0x0, &(0x7f00000001c0)=""/236, 0xec}, &(0x7f0000000300)=0x40) 14:32:04 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async, rerun: 64) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x3}, 0x10) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/202, 0xca, 0x0, &(0x7f00000001c0)=""/236, 0xec}, &(0x7f0000000300)=0x40) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4, 0x15}) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="0c57e94e3222b1cb94e041aaa4642e22d82174ad3e7eb8ab88ff1e65c20d5dbd3ef8224efc0bfe2f997e17bcca5473a2c5e0afcb28ec3bff441f9461b905d610e32b1d951ab208d1494c159f6f30113d7a374f76f28e82acfd626f5b447b8c9c", 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 14:32:04 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/260, 0x104, 0x0, &(0x7f0000000100)=""/126, 0x7e}, &(0x7f0000000200)=0x40) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000040)={r3, 0x7}) 14:32:04 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4, 0x15}) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="0c57e94e3222b1cb94e041aaa4642e22d82174ad3e7eb8ab88ff1e65c20d5dbd3ef8224efc0bfe2f997e17bcca5473a2c5e0afcb28ec3bff441f9461b905d610e32b1d951ab208d1494c159f6f30113d7a374f76f28e82acfd626f5b447b8c9c", 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 14:32:04 executing program 0: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, 0x1, 0x4}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/260, 0x104, 0x0, &(0x7f0000000100)=""/126, 0x7e}, &(0x7f0000000200)=0x40) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000040)={r3, 0x7}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, 0x1, 0x4}) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4, 0x15}) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="0c57e94e3222b1cb94e041aaa4642e22d82174ad3e7eb8ab88ff1e65c20d5dbd3ef8224efc0bfe2f997e17bcca5473a2c5e0afcb28ec3bff441f9461b905d610e32b1d951ab208d1494c159f6f30113d7a374f76f28e82acfd626f5b447b8c9c", 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 14:32:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/260, 0x104, 0x0, &(0x7f0000000100)=""/126, 0x7e}, &(0x7f0000000200)=0x40) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000040)={r3, 0x7}) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/260, 0x104, 0x0, &(0x7f0000000100)=""/126, 0x7e}, &(0x7f0000000200)=0x40) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000040)={r3, 0x7}) (async) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x0) 14:32:04 executing program 0: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, 0x1, 0x4}) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x5c50afff, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) userfaultfd(0x180001) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x100010, r1, 0x7f) 14:32:04 executing program 1: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f00000000c0)="23efda27481c714a1a5c7c48e70db5765097207e03b5cbe4f51ed96ec8dfa383afa62f6b9ca25d74c15f82b820bc0e030cf5c75817283b2f14f91849ba45eac16d5a6efa8f3c5b84bf09ccf44c7024eed178b9d74c891bd40bb7dcf05437b29c27fd29d11b4880103c68c1055d665a02004f93e923ad6effb821e363e7a1696f392aed83b8176e769db0c21b493c408920796f61a75abaf0fd38725fbe82", 0x9e}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x7, "7d62f681eda3245ee458e5e96172c67b31345fd25f2d9f38e8bd25467a1336b9"}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], 0x1, r2}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x100800}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) userfaultfd(0x180001) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x100010, r1, 0x7f) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) userfaultfd(0x180001) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x100010, r1, 0x7f) (async) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], 0x1, r2}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x100800}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], 0x1, r2}) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x100800}) (async) 14:32:04 executing program 1: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f00000000c0)="23efda27481c714a1a5c7c48e70db5765097207e03b5cbe4f51ed96ec8dfa383afa62f6b9ca25d74c15f82b820bc0e030cf5c75817283b2f14f91849ba45eac16d5a6efa8f3c5b84bf09ccf44c7024eed178b9d74c891bd40bb7dcf05437b29c27fd29d11b4880103c68c1055d665a02004f93e923ad6effb821e363e7a1696f392aed83b8176e769db0c21b493c408920796f61a75abaf0fd38725fbe82", 0x9e}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x7, "7d62f681eda3245ee458e5e96172c67b31345fd25f2d9f38e8bd25467a1336b9"}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) userfaultfd(0x180001) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x100010, r1, 0x7f) 14:32:04 executing program 1: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f00000000c0)="23efda27481c714a1a5c7c48e70db5765097207e03b5cbe4f51ed96ec8dfa383afa62f6b9ca25d74c15f82b820bc0e030cf5c75817283b2f14f91849ba45eac16d5a6efa8f3c5b84bf09ccf44c7024eed178b9d74c891bd40bb7dcf05437b29c27fd29d11b4880103c68c1055d665a02004f93e923ad6effb821e363e7a1696f392aed83b8176e769db0c21b493c408920796f61a75abaf0fd38725fbe82", 0x9e}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x7, "7d62f681eda3245ee458e5e96172c67b31345fd25f2d9f38e8bd25467a1336b9"}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r2) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], 0x1, r2}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x100800}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0x2, 0x4, 0x20f0, 0x1, 0x4, 0x6, 0x0, 0x2}, &(0x7f0000000240)={0x7, 0x1, 0x8c, 0x8, 0x80000000, 0x6, 0x2, 0xdd}, &(0x7f0000000340)={0xffffffffffffffff, 0xd61, 0x400, 0x1, 0x80, 0x9c9, 0x3}, &(0x7f00000003c0)={r0, r1/1000+10000}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) sendmsg$802154_raw(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @long={0x3, 0x6, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={&(0x7f0000000140)="f6c225bc0cf38fc28a63ece23a4626", 0xf}}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r7 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r6, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, r6, r3}) 14:32:04 executing program 3: set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x10001, 0x404000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x4, 0x8, 0x0, 0x2a}, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0xb, 0x810, r0, 0x82000000) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1608c, 0x100) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd0, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc0}, 0x24040000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x4, [0x0, 0xffffffff80000001, 0x369bbf10, 0x5]}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 14:32:04 executing program 2: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 3: set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x10001, 0x404000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x4, 0x8, 0x0, 0x2a}, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0xb, 0x810, r0, 0x82000000) (async) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0xb, 0x810, r0, 0x82000000) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1608c, 0x100) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:32:04 executing program 0: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0x2, 0x4, 0x20f0, 0x1, 0x4, 0x6, 0x0, 0x2}, &(0x7f0000000240)={0x7, 0x1, 0x8c, 0x8, 0x80000000, 0x6, 0x2, 0xdd}, &(0x7f0000000340)={0xffffffffffffffff, 0xd61, 0x400, 0x1, 0x80, 0x9c9, 0x3}, &(0x7f00000003c0)={r0, r1/1000+10000}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) sendmsg$802154_raw(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @long={0x3, 0x6, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={&(0x7f0000000140)="f6c225bc0cf38fc28a63ece23a4626", 0xf}}, 0x10) (async) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async, rerun: 32) r7 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r6, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, r6, r3}) 14:32:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200000) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd0, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc0}, 0x24040000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x4, [0x0, 0xffffffff80000001, 0x369bbf10, 0x5]}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 14:32:04 executing program 3: set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0) (async) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x10001, 0x404000) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x4, 0x8, 0x0, 0x2a}, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0xb, 0x810, r0, 0x82000000) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1608c, 0x100) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:32:04 executing program 2: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 0: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0x2, 0x4, 0x20f0, 0x1, 0x4, 0x6, 0x0, 0x2}, &(0x7f0000000240)={0x7, 0x1, 0x8c, 0x8, 0x80000000, 0x6, 0x2, 0xdd}, &(0x7f0000000340)={0xffffffffffffffff, 0xd61, 0x400, 0x1, 0x80, 0x9c9, 0x3}, &(0x7f00000003c0)={r0, r1/1000+10000}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) sendmsg$802154_raw(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @long={0x3, 0x6, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={&(0x7f0000000140)="f6c225bc0cf38fc28a63ece23a4626", 0xf}}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) r7 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r6, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, r6, r3}) 14:32:04 executing program 2: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000280), &(0x7f00000002c0)=0x14) (async) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd0, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc0}, 0x24040000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x4, [0x0, 0xffffffff80000001, 0x369bbf10, 0x5]}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$peek(0x1, r2, &(0x7f0000000100)) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 1: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000500)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000680)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000940)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x6, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r8 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r6, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000c80)={&(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0], 0x7, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000d80)={0x600, 0x3, &(0x7f0000000540)=[0x0, r0, r2], &(0x7f0000000580)=[0x4, 0x7f, 0xffff8000, 0x1, 0x5, 0x3f9], &(0x7f0000000d00)=[r3, 0x0, 0x0, r4, r6, r9], &(0x7f0000000d40)=[0x1ff, 0x1, 0x9, 0x5], 0x0, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/234) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000e40)={&(0x7f0000000dc0)="104f513521f421295244bd29d8b4adb06af11c7dc046bc9507ead7779a9c76efb86492b0cb2ea085979d30f35e3475bb7e64bb73547d5d56d0a2f7d268098aac63213270c442a13684e1413586ffd19d40bd5cfb735060a7e093b8aa46dbc5e9df826ef24f834cc3c0956d12ca87225272361b947b83c1bba7", 0x79, 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000f00)=""/110) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) r12 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r12, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r14 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r14, 0xe, &(0x7f0000000f80)=""/122) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r13], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000ec0)={&(0x7f0000000e80)=[r10, r1, r7, r13], 0x4, 0x800}) r15 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r15, 0x3, &(0x7f0000001000)=""/64) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) userfaultfd(0x0) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) (async) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$peek(0x1, r2, &(0x7f0000000100)) (async) ptrace$peek(0x1, r2, &(0x7f0000000100)) 14:32:04 executing program 1: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x7}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000500)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xe0e0e0e0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000680)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000940)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x6, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) r8 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r6, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000c80)={&(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0], 0x7, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000d80)={0x600, 0x3, &(0x7f0000000540)=[0x0, r0, r2], &(0x7f0000000580)=[0x4, 0x7f, 0xffff8000, 0x1, 0x5, 0x3f9], &(0x7f0000000d00)=[r3, 0x0, 0x0, r4, r6, r9], &(0x7f0000000d40)=[0x1ff, 0x1, 0x9, 0x5], 0x0, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/234) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000e40)={&(0x7f0000000dc0)="104f513521f421295244bd29d8b4adb06af11c7dc046bc9507ead7779a9c76efb86492b0cb2ea085979d30f35e3475bb7e64bb73547d5d56d0a2f7d268098aac63213270c442a13684e1413586ffd19d40bd5cfb735060a7e093b8aa46dbc5e9df826ef24f834cc3c0956d12ca87225272361b947b83c1bba7", 0x79, 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) (async) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000f00)=""/110) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) (async) r12 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r12, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async, rerun: 64) r14 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) (rerun: 64) shmctl$SHM_INFO(r14, 0xe, &(0x7f0000000f80)=""/122) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r13], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000ec0)={&(0x7f0000000e80)=[r10, r1, r7, r13], 0x4, 0x800}) r15 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r15, 0x3, &(0x7f0000001000)=""/64) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) r1 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$peek(0x1, r2, &(0x7f0000000100)) 14:32:04 executing program 3: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r0, 0x8000000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10608c, 0x101040) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:32:04 executing program 1: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000500)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xe0e0e0e0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000680)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000940)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x6, 0x2, 0x4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r8 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r6, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000c80)={&(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0], 0x7, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000d80)={0x600, 0x3, &(0x7f0000000540)=[0x0, r0, r2], &(0x7f0000000580)=[0x4, 0x7f, 0xffff8000, 0x1, 0x5, 0x3f9], &(0x7f0000000d00)=[r3, 0x0, 0x0, r4, r6, r9], &(0x7f0000000d40)=[0x1ff, 0x1, 0x9, 0x5], 0x0, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/234) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000e40)={&(0x7f0000000dc0)="104f513521f421295244bd29d8b4adb06af11c7dc046bc9507ead7779a9c76efb86492b0cb2ea085979d30f35e3475bb7e64bb73547d5d56d0a2f7d268098aac63213270c442a13684e1413586ffd19d40bd5cfb735060a7e093b8aa46dbc5e9df826ef24f834cc3c0956d12ca87225272361b947b83c1bba7", 0x79, 0x0}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000f00)=""/110) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) (async) r12 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r12, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async, rerun: 32) r14 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) (rerun: 32) shmctl$SHM_INFO(r14, 0xe, &(0x7f0000000f80)=""/122) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r13], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000ec0)={&(0x7f0000000e80)=[r10, r1, r7, r13], 0x4, 0x800}) (async) r15 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r15, 0x3, &(0x7f0000001000)=""/64) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000000c0)={0x40, 0x0, r1, 0x12121212}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000000c0)={0x40, 0x0, r1, 0x12121212}) 14:32:04 executing program 3: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r0, 0x8000000) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10608c, 0x101040) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000000c0)={0x40, 0x0, r1, 0x12121212}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000000c0)={0x40, 0x0, r1, 0x12121212}) (async) 14:32:04 executing program 3: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r0, 0x8000000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10608c, 0x101040) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x480880) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x1, 0x7, 0x1, 0x6, 0x8, 0xffffe2ab, 0x207, 0xee}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x8}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x10, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000080)={r2}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x9185690325f4afd6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r5], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x400, 0x3, &(0x7f0000000100)=[0x0, r5, r6], &(0x7f0000000140)=[0x7ff, 0x8001], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x4, 0x7, 0xff, 0x7ff, 0x8], 0x0, 0x52873464}) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x10, r0, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x9185690325f4afd6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r5], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x400, 0x3, &(0x7f0000000100)=[0x0, r5, r6], &(0x7f0000000140)=[0x7ff, 0x8001], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x4, 0x7, 0xff, 0x7ff, 0x8], 0x0, 0x52873464}) syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x9185690325f4afd6) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r5], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x400, 0x3, &(0x7f0000000100)=[0x0, r5, r6], &(0x7f0000000140)=[0x7ff, 0x8001], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x4, 0x7, 0xff, 0x7ff, 0x8], 0x0, 0x52873464}) (async) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000080)={r2}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000080)={r2}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x480880) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x1, 0x7, 0x1, 0x6, 0x8, 0xffffe2ab, 0x207, 0xee}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x480880) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x1, 0x7, 0x1, 0x6, 0x8, 0xffffe2ab, 0x207, 0xee}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x8}) (async) 14:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x10, r0, 0x0) 14:32:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000080)={r2}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:04 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x9185690325f4afd6) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x9185690325f4afd6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r5], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r5], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x400, 0x3, &(0x7f0000000100)=[0x0, r5, r6], &(0x7f0000000140)=[0x7ff, 0x8001], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x4, 0x7, 0xff, 0x7ff, 0x8], 0x0, 0x52873464}) 14:32:04 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x480880) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x1, 0x7, 0x1, 0x6, 0x8, 0xffffe2ab, 0x207, 0xee}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x8}) 14:32:04 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x6088, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x28000, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_io_uring_setup(0x3048, &(0x7f0000000100)={0x0, 0x23f5, 0x4, 0x2, 0x1ff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$sysctl(r0, &(0x7f00000000c0)='0\x00', 0x2) 14:32:04 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, 0xffffffffffffffff, 0x0) 14:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:04 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, 0xffffffffffffffff, 0x0) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000080)={r2}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r3, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x10101010}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x601, 0x4, &(0x7f0000000080)=[0x0, 0x0, r3, r5], &(0x7f00000000c0)=[0x7, 0x401], &(0x7f00000002c0)=[r6, 0x0, r7], &(0x7f0000000300)=[0x8, 0x4], 0x0, 0x40}) openat$drirender128(0xffffff9c, &(0x7f0000000380), 0x1c1000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:05 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x6088, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x28000, 0x0) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) syz_io_uring_setup(0x3048, &(0x7f0000000100)={0x0, 0x23f5, 0x4, 0x2, 0x1ff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$sysctl(r0, &(0x7f00000000c0)='0\x00', 0x2) 14:32:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r3, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x4}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x10101010}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x601, 0x4, &(0x7f0000000080)=[0x0, 0x0, r3, r5], &(0x7f00000000c0)=[0x7, 0x401], &(0x7f00000002c0)=[r6, 0x0, r7], &(0x7f0000000300)=[0x8, 0x4], 0x0, 0x40}) (async) openat$drirender128(0xffffff9c, &(0x7f0000000380), 0x1c1000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:05 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r1, r3, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)) 14:32:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r3, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x4}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x10101010}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x601, 0x4, &(0x7f0000000080)=[0x0, 0x0, r3, r5], &(0x7f00000000c0)=[0x7, 0x401], &(0x7f00000002c0)=[r6, 0x0, r7], &(0x7f0000000300)=[0x8, 0x4], 0x0, 0x40}) openat$drirender128(0xffffff9c, &(0x7f0000000380), 0x1c1000, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (rerun: 64) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r1, r3, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)) 14:32:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x2000000, 0x0, r1}) 14:32:05 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x6088, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x28000, 0x0) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_io_uring_setup(0x3048, &(0x7f0000000100)={0x0, 0x23f5, 0x4, 0x2, 0x1ff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$sysctl(r0, &(0x7f00000000c0)='0\x00', 0x2) 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) read$usbfs(r0, 0x0, 0x11) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x1f, "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"}) 14:32:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r1, r3, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x7, 0x6}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)) 14:32:05 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x2200) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2470.005416][T28712] Unsupported ieee802154 address type: 0 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 1) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_io_uring_setup(0x54ce, &(0x7f0000000080)={0x0, 0xbd55, 0x80, 0x3, 0x318}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) [ 2470.031027][T28721] FAULT_INJECTION: forcing a failure. [ 2470.031027][T28721] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.036583][T28721] CPU: 1 PID: 28721 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_io_uring_setup(0x54ce, &(0x7f0000000080)={0x0, 0xbd55, 0x80, 0x3, 0x318}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2470.041031][T28721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2470.045146][T28721] Call Trace: [ 2470.046639][T28721] [ 2470.047834][T28721] dump_stack_lvl+0x136/0x150 [ 2470.049720][T28721] should_fail_ex+0x4a3/0x5b0 [ 2470.051795][T28721] should_failslab+0x9/0x20 [ 2470.053808][T28721] kmem_cache_alloc+0x63/0x3b0 [ 2470.055855][T28721] vm_area_dup+0x23/0x300 [ 2470.057465][T28721] __split_vma+0x199/0x830 [ 2470.059146][T28721] ? expand_stack+0x20/0x20 [ 2470.060871][T28721] ? find_held_lock+0x2d/0x110 [ 2470.062843][T28721] do_vmi_align_munmap+0x2bc/0x1580 [ 2470.065134][T28721] ? __split_vma+0x830/0x830 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_io_uring_setup(0x54ce, &(0x7f0000000080)={0x0, 0xbd55, 0x80, 0x3, 0x318}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_setup(0x54ce, &(0x7f0000000080)={0x0, 0xbd55, 0x80, 0x3, 0x318}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) [ 2470.067141][T28721] ? mtree_range_walk+0x63e/0x940 [ 2470.069385][T28721] do_vmi_munmap+0x26e/0x2c0 [ 2470.071145][T28721] mmap_region+0x1f0/0x28d0 [ 2470.073167][T28721] ? arch_get_unmapped_area+0x560/0x560 [ 2470.075279][T28721] ? validate_mm+0x1d4/0x290 [ 2470.077323][T28721] ? do_munmap+0xf0/0xf0 [ 2470.078954][T28721] ? security_mmap_addr+0x77/0xa0 [ 2470.081162][T28721] ? get_unmapped_area+0x1e8/0x3c0 [ 2470.083095][T28721] do_mmap+0x831/0xf60 [ 2470.084625][T28721] vm_mmap_pgoff+0x1a2/0x3b0 [ 2470.086509][T28721] ? randomize_page+0xb0/0xb0 [ 2470.088463][T28721] ksys_mmap_pgoff+0x41f/0x5a0 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x51f600) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2470.090545][T28721] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2470.093030][T28721] __do_fast_syscall_32+0x65/0xf0 [ 2470.095207][T28721] do_fast_syscall_32+0x33/0x70 [ 2470.097275][T28721] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.099812][T28721] RIP: 0023:0xf7f8b579 [ 2470.101707][T28721] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x51f600) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2470.110466][T28721] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2470.113840][T28721] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2470.116775][T28721] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2470.119674][T28721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2470.122625][T28721] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2470.125554][T28721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.128501][T28721] [ 2470.129701][ C1] vkms_vblank_simulate: vblank timer overrun 14:32:05 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x8, 0x5, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, r2, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]}) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x2200) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 2) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x51f600) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2470.150775][T28747] FAULT_INJECTION: forcing a failure. [ 2470.150775][T28747] name failslab, interval 1, probability 0, space 0, times 0 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[{}], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x1, 0x3, 0x1, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0xa, 0x0, r4}) [ 2470.155389][T28747] CPU: 0 PID: 28747 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 14:32:05 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x8, 0x5, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x8, 0x5, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, r2, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]}) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) [ 2470.159242][T28747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2470.162569][T28747] Call Trace: [ 2470.163826][T28747] [ 2470.164893][T28747] dump_stack_lvl+0x136/0x150 [ 2470.166591][T28747] should_fail_ex+0x4a3/0x5b0 [ 2470.168299][T28747] should_failslab+0x9/0x20 [ 2470.169936][T28747] kmem_cache_alloc+0x63/0x3b0 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[{}], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x1, 0x3, 0x1, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0xa, 0x0, r4}) [ 2470.171730][T28747] vm_area_dup+0x55/0x300 [ 2470.173399][T28747] __split_vma+0x199/0x830 [ 2470.175023][T28747] ? expand_stack+0x20/0x20 [ 2470.176673][T28747] ? find_held_lock+0x2d/0x110 [ 2470.178387][T28747] do_vmi_align_munmap+0x2bc/0x1580 [ 2470.180269][T28747] ? __split_vma+0x830/0x830 [ 2470.181932][T28747] ? mtree_range_walk+0x63e/0x940 [ 2470.183770][T28747] do_vmi_munmap+0x26e/0x2c0 [ 2470.185448][T28747] mmap_region+0x1f0/0x28d0 [ 2470.187099][T28747] ? arch_get_unmapped_area+0x560/0x560 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[{}], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x1, 0x3, 0x1, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0xa, 0x0, r4}) [ 2470.189093][T28747] ? validate_mm+0x1d4/0x290 [ 2470.190921][T28747] ? do_munmap+0xf0/0xf0 [ 2470.192661][T28747] ? security_mmap_addr+0x77/0xa0 14:32:05 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x8, 0x5, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, r2, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]}) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) (async) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) [ 2470.194458][T28747] ? get_unmapped_area+0x1e8/0x3c0 [ 2470.196523][T28747] do_mmap+0x831/0xf60 [ 2470.198059][T28747] vm_mmap_pgoff+0x1a2/0x3b0 [ 2470.199805][T28747] ? randomize_page+0xb0/0xb0 [ 2470.201553][T28747] ksys_mmap_pgoff+0x41f/0x5a0 [ 2470.203350][T28747] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2470.205363][T28747] __do_fast_syscall_32+0x65/0xf0 [ 2470.207293][T28747] do_fast_syscall_32+0x33/0x70 [ 2470.209116][T28747] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.211461][T28747] RIP: 0023:0xf7f8b579 [ 2470.213043][T28747] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x2200) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2470.220300][T28747] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2470.223559][T28747] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2470.226353][T28747] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2470.229157][T28747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2470.231971][T28747] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2470.234779][T28747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.237584][T28747] 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 3) 14:32:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000080), 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000006, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 14:32:05 executing program 0: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x1407, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x4044005) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x8, 0x0, r3}) 14:32:05 executing program 0: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x1407, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x4044005) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x8, 0x0, r3}) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x1407, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x4044005) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x8, 0x0, r3}) (async) [ 2470.259885][T28771] FAULT_INJECTION: forcing a failure. [ 2470.259885][T28771] name failslab, interval 1, probability 0, space 0, times 0 14:32:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000080), 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000006, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) [ 2470.267018][T28771] CPU: 2 PID: 28771 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 14:32:05 executing program 0: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r3}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x1407, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x4044005) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x8, 0x0, r3}) [ 2470.270883][T28771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2470.274414][T28771] Call Trace: [ 2470.275699][T28771] [ 2470.276908][T28771] dump_stack_lvl+0x136/0x150 [ 2470.278716][T28771] should_fail_ex+0x4a3/0x5b0 [ 2470.280417][T28771] should_failslab+0x9/0x20 [ 2470.282057][T28771] kmem_cache_alloc+0x63/0x3b0 [ 2470.283778][T28771] mas_alloc_nodes+0x4dd/0x880 [ 2470.285478][T28771] mas_preallocate+0x1bb/0x360 [ 2470.287444][T28771] __split_vma+0x1b7/0x830 [ 2470.289335][T28771] ? expand_stack+0x20/0x20 [ 2470.291057][T28771] do_vmi_align_munmap+0x2bc/0x1580 [ 2470.293073][T28771] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2470.295771][T28771] ? __split_vma+0x830/0x830 [ 2470.297824][T28771] ? mtree_range_walk+0x63e/0x940 [ 2470.300099][T28771] do_vmi_munmap+0x26e/0x2c0 [ 2470.302086][T28771] mmap_region+0x1f0/0x28d0 [ 2470.303867][T28771] ? arch_get_unmapped_area+0x560/0x560 [ 2470.306189][T28771] ? validate_mm+0x1d4/0x290 [ 2470.308142][T28771] ? do_munmap+0xf0/0xf0 [ 2470.309919][T28771] ? security_mmap_addr+0x77/0xa0 [ 2470.312130][T28771] ? get_unmapped_area+0x1e8/0x3c0 [ 2470.314339][T28771] do_mmap+0x831/0xf60 [ 2470.316119][T28771] vm_mmap_pgoff+0x1a2/0x3b0 [ 2470.318081][T28771] ? randomize_page+0xb0/0xb0 [ 2470.320131][T28771] ksys_mmap_pgoff+0x41f/0x5a0 [ 2470.322220][T28771] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2470.324621][T28771] __do_fast_syscall_32+0x65/0xf0 [ 2470.326845][T28771] do_fast_syscall_32+0x33/0x70 [ 2470.329005][T28771] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.331753][T28771] RIP: 0023:0xf7f8b579 [ 2470.333565][T28771] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2470.341794][T28771] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2470.345481][T28771] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2470.348633][T28771] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2470.351404][T28771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2470.354138][T28771] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2470.357334][T28771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.360792][T28771] 14:32:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000080), 0x0, 0x0}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000006, 0x10, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007, 0x12, r0, 0x2000) 14:32:05 executing program 0: r0 = socket(0x29, 0x2, 0x0) socket(0x1e, 0x2, 0x3) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000002140000"], 0xfebc}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:05 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 4) [ 2470.383668][T28794] FAULT_INJECTION: forcing a failure. [ 2470.383668][T28794] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.388190][T28794] CPU: 0 PID: 28794 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2470.391882][T28794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2470.395011][T28794] Call Trace: 14:32:05 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) 14:32:05 executing program 0: r0 = socket(0x29, 0x2, 0x0) socket(0x1e, 0x2, 0x3) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000002140000"], 0xfebc}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) socket(0x29, 0x2, 0x0) (async) socket(0x1e, 0x2, 0x3) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000002140000"], 0xfebc}}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) (async) [ 2470.396334][T28794] 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007, 0x12, r0, 0x2000) [ 2470.397542][T28794] dump_stack_lvl+0x136/0x150 [ 2470.399288][T28794] should_fail_ex+0x4a3/0x5b0 [ 2470.401014][T28794] should_failslab+0x9/0x20 [ 2470.402628][T28794] kmem_cache_alloc_bulk+0x68/0x860 [ 2470.404489][T28794] ? kmem_cache_alloc+0x337/0x3b0 [ 2470.406285][T28794] mas_alloc_nodes+0x332/0x880 [ 2470.408018][T28794] mas_preallocate+0x1bb/0x360 [ 2470.409725][T28794] __split_vma+0x1b7/0x830 [ 2470.411350][T28794] ? expand_stack+0x20/0x20 14:32:05 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x38}) [ 2470.412987][T28794] ? find_held_lock+0x2d/0x110 [ 2470.414825][T28794] do_vmi_align_munmap+0x2bc/0x1580 [ 2470.416685][T28794] ? __split_vma+0x830/0x830 14:32:05 executing program 0: r0 = socket(0x29, 0x2, 0x0) socket(0x1e, 0x2, 0x3) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000002140000"], 0xfebc}}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007, 0x12, r0, 0x2000) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007, 0x12, r0, 0x2000) (async) [ 2470.418343][T28794] ? mtree_range_walk+0x63e/0x940 [ 2470.420502][T28794] do_vmi_munmap+0x26e/0x2c0 [ 2470.422168][T28794] mmap_region+0x1f0/0x28d0 [ 2470.423806][T28794] ? arch_get_unmapped_area+0x560/0x560 [ 2470.425748][T28794] ? validate_mm+0x1d4/0x290 [ 2470.427392][T28794] ? do_munmap+0xf0/0xf0 [ 2470.428907][T28794] ? security_mmap_addr+0x77/0xa0 [ 2470.430740][T28794] ? get_unmapped_area+0x1e8/0x3c0 [ 2470.432558][T28794] do_mmap+0x831/0xf60 [ 2470.434004][T28794] vm_mmap_pgoff+0x1a2/0x3b0 14:32:05 executing program 1: mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, 0xffffffffffffffff, 0x8000) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b, 0x1, &(0x7f00000000c0)=""/35, 0x23}, &(0x7f0000000140)=0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x31, 0x4}) [ 2470.435642][T28794] ? randomize_page+0xb0/0xb0 [ 2470.437447][T28794] ksys_mmap_pgoff+0x41f/0x5a0 [ 2470.439243][T28794] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2470.441187][T28794] __do_fast_syscall_32+0x65/0xf0 [ 2470.443190][T28794] do_fast_syscall_32+0x33/0x70 [ 2470.445485][T28794] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.448403][T28794] RIP: 0023:0xf7f8b579 [ 2470.450264][T28794] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2470.458982][T28794] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2470.462791][T28794] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2470.466285][T28794] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2470.469881][T28794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2470.473435][T28794] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2470.476972][T28794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.480486][T28794] 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 5) 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x1010, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={r3, 0x0, 0x0, 0x20, 0x7, 0x4, 0x9, 0x3, 0x2, 0x79, 0x6, 0x1ff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f00000001c0)={0x4c, 0x0, r4, 0xcccccccc}) 14:32:05 executing program 1: mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, 0xffffffffffffffff, 0x8000) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b, 0x1, &(0x7f00000000c0)=""/35, 0x23}, &(0x7f0000000140)=0x40) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b, 0x1, &(0x7f00000000c0)=""/35, 0x23}, &(0x7f0000000140)=0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x31, 0x4}) 14:32:05 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x1010, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={r3, 0x0, 0x0, 0x20, 0x7, 0x4, 0x9, 0x3, 0x2, 0x79, 0x6, 0x1ff}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={r3, 0x0, 0x0, 0x20, 0x7, 0x4, 0x9, 0x3, 0x2, 0x79, 0x6, 0x1ff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f00000001c0)={0x4c, 0x0, r4, 0xcccccccc}) 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 6) 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) 14:32:05 executing program 1: mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, 0xffffffffffffffff, 0x8000) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b, 0x1, &(0x7f00000000c0)=""/35, 0x23}, &(0x7f0000000140)=0x40) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x31, 0x4}) [ 2470.525457][T28833] FAULT_INJECTION: forcing a failure. [ 2470.525457][T28833] name failslab, interval 1, probability 0, space 0, times 0 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x1010, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={r3, 0x0, 0x0, 0x20, 0x7, 0x4, 0x9, 0x3, 0x2, 0x79, 0x6, 0x1ff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f00000001c0)={0x4c, 0x0, r4, 0xcccccccc}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x1010, r2, 0x80000000) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={r3, 0x0, 0x0, 0x20, 0x7, 0x4, 0x9, 0x3, 0x2, 0x79, 0x6, 0x1ff}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f00000001c0)={0x4c, 0x0, r4, 0xcccccccc}) (async) [ 2470.529926][T28833] CPU: 2 PID: 28833 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2470.533884][T28833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2470.537126][T28833] Call Trace: [ 2470.538372][T28833] [ 2470.539478][T28833] dump_stack_lvl+0x136/0x150 [ 2470.541203][T28833] should_fail_ex+0x4a3/0x5b0 [ 2470.542992][T28833] should_failslab+0x9/0x20 [ 2470.544655][T28833] kmem_cache_alloc+0x63/0x3b0 [ 2470.546435][T28833] vm_area_dup+0x23/0x300 [ 2470.548058][T28833] __split_vma+0x199/0x830 [ 2470.549710][T28833] ? expand_stack+0x20/0x20 [ 2470.551357][T28833] do_vmi_align_munmap+0x400/0x1580 [ 2470.553436][T28833] ? __split_vma+0x830/0x830 [ 2470.555147][T28833] ? mtree_range_walk+0x63e/0x940 [ 2470.557038][T28833] do_vmi_munmap+0x26e/0x2c0 [ 2470.558750][T28833] mmap_region+0x1f0/0x28d0 [ 2470.560428][T28833] ? arch_get_unmapped_area+0x560/0x560 [ 2470.562415][T28833] ? validate_mm+0x1d4/0x290 [ 2470.564170][T28833] ? do_munmap+0xf0/0xf0 [ 2470.565898][T28833] ? security_mmap_addr+0x77/0xa0 [ 2470.567837][T28833] ? get_unmapped_area+0x1e8/0x3c0 [ 2470.569635][T28833] do_mmap+0x831/0xf60 [ 2470.571272][T28833] vm_mmap_pgoff+0x1a2/0x3b0 [ 2470.573147][T28833] ? randomize_page+0xb0/0xb0 [ 2470.574819][T28833] ksys_mmap_pgoff+0x41f/0x5a0 [ 2470.576523][T28833] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2470.578411][T28833] __do_fast_syscall_32+0x65/0xf0 [ 2470.580204][T28833] do_fast_syscall_32+0x33/0x70 [ 2470.582261][T28833] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.584462][T28854] FAULT_INJECTION: forcing a failure. [ 2470.584462][T28854] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.584649][T28833] RIP: 0023:0xf7f8b579 [ 2470.590821][T28833] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2470.597790][T28833] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2470.600719][T28833] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2470.603744][T28833] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2470.606765][T28833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2470.609570][T28833] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2470.612459][T28833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.615262][T28833] 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6088, 0x141001) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x2, 0x17, 0x401, 0x1ff, 0xda, 0x4, &(0x7f0000000100)="da4d877250346361d6edfe8622ed5efdb2d7e011c338ffc7a23c8b45273a2244cf083710d6ae9604b11ed2572277782d2775a8edb2e8d742e6365a67293af64b9f9f0122bec64d04ae41353a74e5c5ba70b514715e8f8b8c40e19fe02c5bc2c2a8679985245f255a3eb86626a821379986b96d7b40b7912c6e077851324f4d7247465f3ff8c4f00cd83b5041e9e9a90ca27ea443dae02108f083742446cf2783d3caadd0f6fad8b9ff1d2dfb0ad670846c7064fca2e57fe3c9e35eee7b38b76f710f4cd9bc2f0b27cb5aa8400a66ade006da7e266cacb4ca1b98"}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 1) [ 2470.616451][T28854] CPU: 1 PID: 28854 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2470.620818][T28854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2470.624549][T28854] Call Trace: [ 2470.625912][T28854] [ 2470.626995][T28854] dump_stack_lvl+0x136/0x150 [ 2470.628812][T28854] should_fail_ex+0x4a3/0x5b0 [ 2470.630732][T28854] should_failslab+0x9/0x20 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 7) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6088, 0x141001) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x2, 0x17, 0x401, 0x1ff, 0xda, 0x4, &(0x7f0000000100)="da4d877250346361d6edfe8622ed5efdb2d7e011c338ffc7a23c8b45273a2244cf083710d6ae9604b11ed2572277782d2775a8edb2e8d742e6365a67293af64b9f9f0122bec64d04ae41353a74e5c5ba70b514715e8f8b8c40e19fe02c5bc2c2a8679985245f255a3eb86626a821379986b96d7b40b7912c6e077851324f4d7247465f3ff8c4f00cd83b5041e9e9a90ca27ea443dae02108f083742446cf2783d3caadd0f6fad8b9ff1d2dfb0ad670846c7064fca2e57fe3c9e35eee7b38b76f710f4cd9bc2f0b27cb5aa8400a66ade006da7e266cacb4ca1b98"}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2470.632550][T28854] kmem_cache_alloc+0x63/0x3b0 [ 2470.634536][T28854] vm_area_dup+0x23/0x300 [ 2470.636294][T28854] __split_vma+0x199/0x830 [ 2470.638109][T28854] ? expand_stack+0x20/0x20 [ 2470.639950][T28854] ? find_held_lock+0x2d/0x110 [ 2470.641882][T28854] do_vmi_align_munmap+0x2bc/0x1580 [ 2470.643989][T28854] ? __split_vma+0x830/0x830 [ 2470.645864][T28854] ? mtree_range_walk+0x63e/0x940 [ 2470.647949][T28854] do_vmi_munmap+0x26e/0x2c0 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) [ 2470.649644][T28860] FAULT_INJECTION: forcing a failure. [ 2470.649644][T28860] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.649815][T28854] mmap_region+0x1f0/0x28d0 [ 2470.656380][T28854] ? arch_get_unmapped_area+0x560/0x560 [ 2470.658612][T28854] ? validate_mm+0x1d4/0x290 [ 2470.660506][T28854] ? do_munmap+0xf0/0xf0 [ 2470.662236][T28854] ? security_mmap_addr+0x77/0xa0 [ 2470.664294][T28854] ? get_unmapped_area+0x1e8/0x3c0 [ 2470.666339][T28854] do_mmap+0x831/0xf60 [ 2470.668016][T28854] vm_mmap_pgoff+0x1a2/0x3b0 [ 2470.669884][T28854] ? randomize_page+0xb0/0xb0 [ 2470.671815][T28854] ksys_mmap_pgoff+0x41f/0x5a0 [ 2470.673761][T28854] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2470.675978][T28854] __do_fast_syscall_32+0x65/0xf0 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6088, 0x141001) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x2, 0x17, 0x401, 0x1ff, 0xda, 0x4, &(0x7f0000000100)="da4d877250346361d6edfe8622ed5efdb2d7e011c338ffc7a23c8b45273a2244cf083710d6ae9604b11ed2572277782d2775a8edb2e8d742e6365a67293af64b9f9f0122bec64d04ae41353a74e5c5ba70b514715e8f8b8c40e19fe02c5bc2c2a8679985245f255a3eb86626a821379986b96d7b40b7912c6e077851324f4d7247465f3ff8c4f00cd83b5041e9e9a90ca27ea443dae02108f083742446cf2783d3caadd0f6fad8b9ff1d2dfb0ad670846c7064fca2e57fe3c9e35eee7b38b76f710f4cd9bc2f0b27cb5aa8400a66ade006da7e266cacb4ca1b98"}) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2470.678017][T28854] do_fast_syscall_32+0x33/0x70 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2470.680151][T28854] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.682816][T28854] RIP: 0023:0xf7f51579 [ 2470.684476][T28854] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2470.692119][T28854] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2470.695439][T28854] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2470.698596][T28854] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2470.701715][T28854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2470.704813][T28854] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2470.707975][T28854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.711128][T28854] [ 2470.712385][T28860] CPU: 0 PID: 28860 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2470.712510][ C1] vkms_vblank_simulate: vblank timer overrun [ 2470.716073][T28860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2470.721986][T28860] Call Trace: [ 2470.723202][T28860] [ 2470.724294][T28860] dump_stack_lvl+0x136/0x150 [ 2470.725989][T28860] should_fail_ex+0x4a3/0x5b0 [ 2470.727861][T28860] should_failslab+0x9/0x20 [ 2470.729496][T28860] kmem_cache_alloc+0x63/0x3b0 [ 2470.731253][T28860] vm_area_dup+0x55/0x300 [ 2470.732781][T28860] __split_vma+0x199/0x830 [ 2470.734404][T28860] ? expand_stack+0x20/0x20 [ 2470.736121][T28860] do_vmi_align_munmap+0x400/0x1580 [ 2470.738027][T28860] ? __split_vma+0x830/0x830 [ 2470.739712][T28860] ? mtree_range_walk+0x63e/0x940 [ 2470.741557][T28860] do_vmi_munmap+0x26e/0x2c0 [ 2470.743215][T28860] mmap_region+0x1f0/0x28d0 [ 2470.744899][T28860] ? arch_get_unmapped_area+0x560/0x560 [ 2470.746932][T28860] ? validate_mm+0x1d4/0x290 [ 2470.748617][T28860] ? do_munmap+0xf0/0xf0 [ 2470.750178][T28860] ? security_mmap_addr+0x77/0xa0 [ 2470.751988][T28860] ? get_unmapped_area+0x1e8/0x3c0 [ 2470.753903][T28860] do_mmap+0x831/0xf60 [ 2470.755401][T28860] vm_mmap_pgoff+0x1a2/0x3b0 [ 2470.757150][T28860] ? randomize_page+0xb0/0xb0 [ 2470.758855][T28860] ksys_mmap_pgoff+0x41f/0x5a0 [ 2470.760617][T28860] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2470.762543][T28860] __do_fast_syscall_32+0x65/0xf0 [ 2470.764370][T28860] do_fast_syscall_32+0x33/0x70 [ 2470.766184][T28860] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.768667][T28860] RIP: 0023:0xf7f8b579 [ 2470.770134][T28860] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 14:32:05 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r0}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r2}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) getpeername$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r11, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r11, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x41c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x68}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2fe}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r24 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x40a080) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r24, 0x0) [ 2470.777210][T28860] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2470.780455][T28860] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2470.783237][T28860] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2470.786062][T28860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2470.789019][T28860] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2470.791866][T28860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.794743][T28860] 14:32:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 2) 14:32:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 8) 14:32:05 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r0}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r2}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) (async) getpeername$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r11, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(r11, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x41c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x68}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2fe}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r24 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x40a080) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r24, 0x0) 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2470.815607][T28872] FAULT_INJECTION: forcing a failure. [ 2470.815607][T28872] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.819217][T28878] FAULT_INJECTION: forcing a failure. [ 2470.819217][T28878] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.820599][T28872] CPU: 3 PID: 28872 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2470.830016][T28872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:05 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r0}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r2}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r11, 0x0, 0x0) (async) getpeername$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r11, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(r11, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x41c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x68}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2fe}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r24 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x40a080) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r24, 0x0) [ 2470.833777][T28872] Call Trace: [ 2470.835573][T28872] [ 2470.836956][T28872] dump_stack_lvl+0x136/0x150 [ 2470.839123][T28872] should_fail_ex+0x4a3/0x5b0 [ 2470.841322][T28872] should_failslab+0x9/0x20 [ 2470.843369][T28872] kmem_cache_alloc+0x63/0x3b0 [ 2470.845603][T28872] vm_area_dup+0x55/0x300 [ 2470.847613][T28872] __split_vma+0x199/0x830 14:32:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x9, 0x3, 0x1, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r4, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000004c0)={0x7, r4, r2, 0xe0e0e0e0}) 14:32:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) [ 2470.849652][T28872] ? expand_stack+0x20/0x20 [ 2470.852047][T28872] ? find_held_lock+0x2d/0x110 [ 2470.854265][T28872] do_vmi_align_munmap+0x2bc/0x1580 [ 2470.856709][T28872] ? __split_vma+0x830/0x830 [ 2470.858865][T28872] ? mtree_range_walk+0x63e/0x940 [ 2470.861158][T28872] do_vmi_munmap+0x26e/0x2c0 [ 2470.862873][T28872] mmap_region+0x1f0/0x28d0 [ 2470.865026][T28872] ? arch_get_unmapped_area+0x560/0x560 [ 2470.867570][T28872] ? validate_mm+0x1d4/0x290 [ 2470.869341][T28872] ? do_munmap+0xf0/0xf0 [ 2470.871126][T28872] ? security_mmap_addr+0x77/0xa0 [ 2470.873060][T28872] ? get_unmapped_area+0x1e8/0x3c0 [ 2470.874946][T28872] do_mmap+0x831/0xf60 [ 2470.876431][T28872] vm_mmap_pgoff+0x1a2/0x3b0 [ 2470.878349][T28872] ? randomize_page+0xb0/0xb0 [ 2470.880203][T28872] ksys_mmap_pgoff+0x41f/0x5a0 [ 2470.882140][T28872] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2470.884346][T28872] __do_fast_syscall_32+0x65/0xf0 [ 2470.886429][T28872] do_fast_syscall_32+0x33/0x70 [ 2470.888423][T28872] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.890889][T28872] RIP: 0023:0xf7f51579 [ 2470.892548][T28872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2470.900194][T28872] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2470.903599][T28872] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2470.906807][T28872] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2470.909989][T28872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2470.913188][T28872] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2470.916369][T28872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.919554][T28872] [ 2470.920812][T28878] CPU: 1 PID: 28878 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 14:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 3) [ 2470.925502][T28878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2470.929138][T28878] Call Trace: [ 2470.930323][T28878] [ 2470.931369][T28878] dump_stack_lvl+0x136/0x150 [ 2470.933138][T28878] should_fail_ex+0x4a3/0x5b0 [ 2470.935281][T28878] should_failslab+0x9/0x20 [ 2470.937292][T28878] kmem_cache_alloc+0x63/0x3b0 [ 2470.938344][T28899] FAULT_INJECTION: forcing a failure. [ 2470.938344][T28899] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.939285][T28878] mas_alloc_nodes+0x4dd/0x880 [ 2470.946041][T28878] mas_preallocate+0x1bb/0x360 [ 2470.947991][T28878] __split_vma+0x1b7/0x830 [ 2470.949772][T28878] ? expand_stack+0x20/0x20 [ 2470.951580][T28878] do_vmi_align_munmap+0x400/0x1580 [ 2470.953743][T28878] ? __split_vma+0x830/0x830 [ 2470.955404][T28878] ? mtree_range_walk+0x63e/0x940 [ 2470.957201][T28878] do_vmi_munmap+0x26e/0x2c0 [ 2470.958837][T28878] mmap_region+0x1f0/0x28d0 [ 2470.960473][T28878] ? arch_get_unmapped_area+0x560/0x560 [ 2470.962421][T28878] ? validate_mm+0x1d4/0x290 [ 2470.964445][T28878] ? do_munmap+0xf0/0xf0 [ 2470.966208][T28878] ? security_mmap_addr+0x77/0xa0 [ 2470.967997][T28878] ? get_unmapped_area+0x1e8/0x3c0 [ 2470.969809][T28878] do_mmap+0x831/0xf60 [ 2470.971259][T28878] vm_mmap_pgoff+0x1a2/0x3b0 [ 2470.972937][T28878] ? randomize_page+0xb0/0xb0 [ 2470.974650][T28878] ksys_mmap_pgoff+0x41f/0x5a0 [ 2470.976394][T28878] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2470.978291][T28878] __do_fast_syscall_32+0x65/0xf0 [ 2470.980075][T28878] do_fast_syscall_32+0x33/0x70 [ 2470.981823][T28878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.984423][T28878] RIP: 0023:0xf7f8b579 [ 2470.986124][T28878] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2470.993427][T28878] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2470.996492][T28878] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2470.999393][T28878] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.002377][T28878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.005800][T28878] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.008816][T28878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.012013][T28878] [ 2471.013265][T28899] CPU: 0 PID: 28899 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2471.013392][ C1] vkms_vblank_simulate: vblank timer overrun [ 2471.017404][T28899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2471.023193][T28899] Call Trace: [ 2471.024553][T28899] [ 2471.025790][T28899] dump_stack_lvl+0x136/0x150 [ 2471.027844][T28899] should_fail_ex+0x4a3/0x5b0 [ 2471.029928][T28899] should_failslab+0x9/0x20 [ 2471.031786][T28899] kmem_cache_alloc+0x63/0x3b0 [ 2471.033724][T28899] mas_alloc_nodes+0x4dd/0x880 [ 2471.035684][T28899] mas_preallocate+0x1bb/0x360 [ 2471.037712][T28899] __split_vma+0x1b7/0x830 [ 2471.039537][T28899] ? expand_stack+0x20/0x20 [ 2471.041478][T28899] ? find_held_lock+0x2d/0x110 [ 2471.043642][T28899] do_vmi_align_munmap+0x2bc/0x1580 [ 2471.045985][T28899] ? __split_vma+0x830/0x830 [ 2471.048068][T28899] ? mtree_range_walk+0x63e/0x940 [ 2471.050335][T28899] do_vmi_munmap+0x26e/0x2c0 [ 2471.052373][T28899] mmap_region+0x1f0/0x28d0 [ 2471.054403][T28899] ? arch_get_unmapped_area+0x560/0x560 [ 2471.056866][T28899] ? validate_mm+0x1d4/0x290 [ 2471.058917][T28899] ? do_munmap+0xf0/0xf0 [ 2471.060827][T28899] ? security_mmap_addr+0x77/0xa0 [ 2471.063060][T28899] ? get_unmapped_area+0x1e8/0x3c0 [ 2471.065353][T28899] do_mmap+0x831/0xf60 [ 2471.067247][T28899] vm_mmap_pgoff+0x1a2/0x3b0 [ 2471.069349][T28899] ? randomize_page+0xb0/0xb0 [ 2471.071075][T28899] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.072993][T28899] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2471.075357][T28899] __do_fast_syscall_32+0x65/0xf0 [ 2471.077331][T28899] do_fast_syscall_32+0x33/0x70 [ 2471.079226][T28899] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.081798][T28899] RIP: 0023:0xf7f51579 [ 2471.083603][T28899] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.091682][T28899] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2471.095157][T28899] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2471.098222][T28899] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.101003][T28899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.103813][T28899] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.106627][T28899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.109533][T28899] 14:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 9) 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x9, 0x3, 0x1, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r4, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000004c0)={0x7, r4, r2, 0xe0e0e0e0}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x9, 0x3, 0x1, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) (async) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r4, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000004c0)={0x7, r4, r2, 0xe0e0e0e0}) (async) 14:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 14:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 4) [ 2471.136320][T28910] FAULT_INJECTION: forcing a failure. 14:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) [ 2471.136320][T28910] name failslab, interval 1, probability 0, space 0, times 0 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x9, 0x3, 0x1, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) (async) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r4, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000004c0)={0x7, r4, r2, 0xe0e0e0e0}) [ 2471.141889][T28910] CPU: 0 PID: 28910 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2471.146102][T28912] FAULT_INJECTION: forcing a failure. [ 2471.146102][T28912] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.146640][T28910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2471.155696][T28910] Call Trace: [ 2471.157185][T28910] [ 2471.158497][T28910] dump_stack_lvl+0x136/0x150 [ 2471.160582][T28910] should_fail_ex+0x4a3/0x5b0 [ 2471.162614][T28910] should_failslab+0x9/0x20 [ 2471.164634][T28910] kmem_cache_alloc_bulk+0x68/0x860 [ 2471.166958][T28910] ? kmem_cache_alloc+0x337/0x3b0 [ 2471.169179][T28910] mas_alloc_nodes+0x332/0x880 [ 2471.171298][T28910] mas_preallocate+0x1bb/0x360 [ 2471.173428][T28910] __split_vma+0x1b7/0x830 [ 2471.175227][T28910] ? expand_stack+0x20/0x20 [ 2471.177204][T28910] do_vmi_align_munmap+0x400/0x1580 [ 2471.179146][T28910] ? __split_vma+0x830/0x830 [ 2471.180939][T28910] ? mtree_range_walk+0x63e/0x940 [ 2471.183198][T28910] do_vmi_munmap+0x26e/0x2c0 [ 2471.185306][T28910] mmap_region+0x1f0/0x28d0 [ 2471.187354][T28910] ? arch_get_unmapped_area+0x560/0x560 [ 2471.189875][T28910] ? validate_mm+0x1d4/0x290 [ 2471.191916][T28910] ? do_munmap+0xf0/0xf0 [ 2471.193442][T28910] ? security_mmap_addr+0x77/0xa0 [ 2471.195631][T28910] ? get_unmapped_area+0x1e8/0x3c0 14:32:06 executing program 3: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x40, 0x2ac943) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) getpeername$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x2d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="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"]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r10, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r10, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r14}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x4, 0x5, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x65, 0x0, 0x3f, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@rr={0x7, 0x7, 0x1c, [@local]}, @timestamp_addr={0x44, 0x4c, 0x41, 0x1, 0x3, [{@multicast2, 0x8}, {@rand_addr=0x64010100, 0x5}, {@private=0xa010100, 0x200}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x6411}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x20}, {@empty}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xfffffff9}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x468, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r23}}}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x20680, 0x0) [ 2471.197896][T28910] do_mmap+0x831/0xf60 [ 2471.199948][T28910] vm_mmap_pgoff+0x1a2/0x3b0 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x40001, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000480), 0x10102, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000540)) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r5, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000400)={0x501, 0x3, &(0x7f00000000c0)=[r1, 0x0, r1], &(0x7f0000000100)=[0x9, 0xffffff23, 0x8000, 0x2, 0x8, 0x1, 0x8000, 0x800], &(0x7f0000000380)=[0x0, 0x0, r5, r7, 0x0, 0x0, 0x0, r8], &(0x7f00000003c0)=[0x536], 0x0, 0x7}) [ 2471.201947][T28910] ? randomize_page+0xb0/0xb0 [ 2471.204119][T28910] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.206160][T28910] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2471.208577][T28910] __do_fast_syscall_32+0x65/0xf0 [ 2471.210814][T28910] do_fast_syscall_32+0x33/0x70 [ 2471.212980][T28910] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.215361][T28910] RIP: 0023:0xf7f8b579 [ 2471.217157][T28910] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.224602][T28910] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2471.227744][T28910] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2471.230472][T28910] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.233208][T28910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.235980][T28910] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.238677][T28910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.241402][T28910] [ 2471.242490][T28912] CPU: 2 PID: 28912 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2471.246171][T28912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 14:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 10) 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x40001, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000480), 0x10102, 0x0) (async) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000480), 0x10102, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000540)) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r5, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000400)={0x501, 0x3, &(0x7f00000000c0)=[r1, 0x0, r1], &(0x7f0000000100)=[0x9, 0xffffff23, 0x8000, 0x2, 0x8, 0x1, 0x8000, 0x800], &(0x7f0000000380)=[0x0, 0x0, r5, r7, 0x0, 0x0, 0x0, r8], &(0x7f00000003c0)=[0x536], 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000400)={0x501, 0x3, &(0x7f00000000c0)=[r1, 0x0, r1], &(0x7f0000000100)=[0x9, 0xffffff23, 0x8000, 0x2, 0x8, 0x1, 0x8000, 0x800], &(0x7f0000000380)=[0x0, 0x0, r5, r7, 0x0, 0x0, 0x0, r8], &(0x7f00000003c0)=[0x536], 0x0, 0x7}) [ 2471.249273][T28912] Call Trace: [ 2471.250720][T28912] 14:32:06 executing program 3: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x40, 0x2ac943) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) (async) getpeername$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x2d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="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"]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) getpeername$packet(r10, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r10, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r14}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x4, 0x5, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x65, 0x0, 0x3f, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@rr={0x7, 0x7, 0x1c, [@local]}, @timestamp_addr={0x44, 0x4c, 0x41, 0x1, 0x3, [{@multicast2, 0x8}, {@rand_addr=0x64010100, 0x5}, {@private=0xa010100, 0x200}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x6411}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x20}, {@empty}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xfffffff9}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x468, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r23}}}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x20680, 0x0) [ 2471.252097][T28912] dump_stack_lvl+0x136/0x150 [ 2471.254120][T28912] should_fail_ex+0x4a3/0x5b0 [ 2471.255805][T28912] should_failslab+0x9/0x20 [ 2471.257458][T28912] kmem_cache_alloc_bulk+0x68/0x860 [ 2471.259288][T28912] ? kmem_cache_alloc+0x337/0x3b0 [ 2471.261306][T28912] mas_alloc_nodes+0x332/0x880 [ 2471.262939][T28912] mas_preallocate+0x1bb/0x360 [ 2471.264636][T28912] __split_vma+0x1b7/0x830 [ 2471.266553][T28912] ? expand_stack+0x20/0x20 [ 2471.268378][T28912] ? find_held_lock+0x2d/0x110 [ 2471.270051][T28912] do_vmi_align_munmap+0x2bc/0x1580 [ 2471.272408][T28912] ? __split_vma+0x830/0x830 [ 2471.274414][T28912] ? mtree_range_walk+0x63e/0x940 [ 2471.276650][T28912] do_vmi_munmap+0x26e/0x2c0 [ 2471.278640][T28912] mmap_region+0x1f0/0x28d0 [ 2471.280581][T28912] ? arch_get_unmapped_area+0x560/0x560 [ 2471.282566][T28912] ? validate_mm+0x1d4/0x290 [ 2471.284557][T28912] ? do_munmap+0xf0/0xf0 [ 2471.286398][T28912] ? security_mmap_addr+0x77/0xa0 [ 2471.288350][T28912] ? get_unmapped_area+0x1e8/0x3c0 [ 2471.290172][T28912] do_mmap+0x831/0xf60 [ 2471.292027][T28912] vm_mmap_pgoff+0x1a2/0x3b0 [ 2471.293731][T28912] ? randomize_page+0xb0/0xb0 [ 2471.295390][T28912] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.297092][T28912] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2471.298970][T28912] __do_fast_syscall_32+0x65/0xf0 [ 2471.300759][T28912] do_fast_syscall_32+0x33/0x70 [ 2471.302501][T28912] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.305219][T28912] RIP: 0023:0xf7f51579 [ 2471.306826][T28912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.314159][T28912] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2471.317567][T28912] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2471.320450][T28912] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.323245][T28912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.326071][T28912] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.328907][T28912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.331705][T28912] 14:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 5) 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x40001, 0x0) (async) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000480), 0x10102, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000540)) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x193000) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x7}) (async, rerun: 32) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01464ba, &(0x7f0000000440)={0x8, 0x0, r5, 0xbbbbbbbb}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000400)={0x501, 0x3, &(0x7f00000000c0)=[r1, 0x0, r1], &(0x7f0000000100)=[0x9, 0xffffff23, 0x8000, 0x2, 0x8, 0x1, 0x8000, 0x800], &(0x7f0000000380)=[0x0, 0x0, r5, r7, 0x0, 0x0, 0x0, r8], &(0x7f00000003c0)=[0x536], 0x0, 0x7}) 14:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 11) 14:32:06 executing program 3: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x40, 0x2ac943) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7f50, 0x8000, 0x3, 0x9, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x0, [@empty]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x0, [0x10001, 0x10000, 0x2]}, @rr={0x7, 0xf, 0xf6, [@private=0xa010102, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x2f, [@loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @broadcast, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r10, 0x0, 0x0) getpeername$packet(r10, &(0x7f0000000280), &(0x7f00000002c0)=0x14) (async) getpeername$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x0, 0x3, "99"}, @timestamp_addr={0x44, 0x2c, 0x2d, 0x1, 0x6, [{@empty, 0x4}, {@broadcast, 0xdae}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x4}, {@local, 0xff}]}, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @ssrr={0x89, 0x1b, 0xbd, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @local, @multicast2, @multicast2, @remote]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="7f50800000000000000000094b56006c006800000729907864010101e00000028307000000000044106e00000100010001000000000002070ff60a010102ac1414bbac1414aa9404010000892b2f7f00000164010102ffffffff64010100ffffffff0000000000000000ac1e01017f000001ac1414380000d91517244a02014feacd8c9ee6756ff4f4d12636049f2e743d68ef431543ed13c9dfce309ec096fbc9573c89a5c4d009da3942708c1334c5102ed00c94b5cb57ac0b43ebe9b3a5091cfa7930ceb6ac56f1b24ec9bb5ce6699f55c4e75ae426351e66e37ba7d8148e850d6a5b2e9fdba51885cd912500a4e17f7e74206b24b25554a20e973aa28df1ea41e2f10d2140f670293c86659a540b55587d0414ab4d8db713588b3e174307088c66361ee2775291d210cbb721e13323c2772a2c6e5f"]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="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"]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername$packet(r10, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async) getpeername$packet(r10, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x414, 0xfffffffe, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x65, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @lsrr={0x83, 0x1b, 0x6a, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x9, 0x6, 0x3, 0x4, 0xff, 0x7ff]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0xc, [0xfffffffe, 0x7fffffff, 0x5, 0x2, 0x1]}, @timestamp_addr={0x44, 0x34, 0x19, 0x1, 0x8, [{@multicast2, 0x869d046}, {@remote, 0xfffffffc}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0x8}, {@empty, 0x8}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x78, [@multicast2, @broadcast, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) getpeername$packet(r10, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r14}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000900)={0x7f8, 0x0, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x4, 0x59}]}}}]}}, {{0x8, 0x1, r14}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff31}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8000000}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0x1, 0x7ff}, {0x3, 0x20, 0x80, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x86}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x4, 0x5, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x65, 0x0, 0x3f, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@rr={0x7, 0x7, 0x1c, [@local]}, @timestamp_addr={0x44, 0x4c, 0x41, 0x1, 0x3, [{@multicast2, 0x8}, {@rand_addr=0x64010100, 0x5}, {@private=0xa010100, 0x200}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x6411}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x20}, {@empty}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xfffffff9}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x468, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r23}}}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x20680, 0x0) 14:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 6) 14:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x2400) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) read$usbfs(r2, &(0x7f0000000180)=""/28, 0x1c) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff0600ff53870191236ae9cd270004f2901a00301ac27eb0e85abe25a6fb6edeb8c0f7ca0400012bbd7000fcdbdf", @ANYRES32=r2, @ANYBLOB="0900020073797a32df55a7c5ea1f7cd973aa000000000800011801000000050054000100000008000100010033000005003300000000000900020073797a30000000000900020073797a3100000000969a07e4ac191ae28de6a76cda5513ab6f2effe0735e613366747b5b86ac835dbb11382b26275f39813ec733139def66f51f41c676aa433b44485359b212ef8bc8f76df9231743c1b359a58224ce65d7be13740819615d5f8124d9dc0379f8a7566309ef85218d1ad3285eb9fdc2419c36c738ccc6e3999ad9f4906faf52cdbba1"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000001, 0x440) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x1010, r1, 0x30000) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000040)) 14:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 12) 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, 0x0, 0x44ded1482a631762}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000200)={0xcf, r2, r3, 0xcccccccc}) [ 2471.378093][T28949] FAULT_INJECTION: forcing a failure. [ 2471.378093][T28949] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.380128][T28950] FAULT_INJECTION: forcing a failure. [ 2471.380128][T28950] name failslab, interval 1, probability 0, space 0, times 0 14:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x2400) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) read$usbfs(r2, &(0x7f0000000180)=""/28, 0x1c) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff0600ff53870191236ae9cd270004f2901a00301ac27eb0e85abe25a6fb6edeb8c0f7ca0400012bbd7000fcdbdf", @ANYRES32=r2, @ANYBLOB="0900020073797a32df55a7c5ea1f7cd973aa000000000800011801000000050054000100000008000100010033000005003300000000000900020073797a30000000000900020073797a3100000000969a07e4ac191ae28de6a76cda5513ab6f2effe0735e613366747b5b86ac835dbb11382b26275f39813ec733139def66f51f41c676aa433b44485359b212ef8bc8f76df9231743c1b359a58224ce65d7be13740819615d5f8124d9dc0379f8a7566309ef85218d1ad3285eb9fdc2419c36c738ccc6e3999ad9f4906faf52cdbba1"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff0600ff53870191236ae9cd270004f2901a00301ac27eb0e85abe25a6fb6edeb8c0f7ca0400012bbd7000fcdbdf", @ANYRES32=r2, @ANYBLOB="0900020073797a32df55a7c5ea1f7cd973aa000000000800011801000000050054000100000008000100010033000005003300000000000900020073797a30000000000900020073797a3100000000969a07e4ac191ae28de6a76cda5513ab6f2effe0735e613366747b5b86ac835dbb11382b26275f39813ec733139def66f51f41c676aa433b44485359b212ef8bc8f76df9231743c1b359a58224ce65d7be13740819615d5f8124d9dc0379f8a7566309ef85218d1ad3285eb9fdc2419c36c738ccc6e3999ad9f4906faf52cdbba1"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x80000001, 0x440) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000001, 0x440) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x1010, r1, 0x30000) (async) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x1010, r1, 0x30000) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000040)) 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, 0x0, 0x44ded1482a631762}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000200)={0xcf, r2, r3, 0xcccccccc}) [ 2471.382667][T28949] CPU: 2 PID: 28949 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2471.391639][T28949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2471.395057][T28949] Call Trace: [ 2471.396327][T28949] [ 2471.397387][T28949] dump_stack_lvl+0x136/0x150 [ 2471.399051][T28949] should_fail_ex+0x4a3/0x5b0 [ 2471.400732][T28949] should_failslab+0x9/0x20 [ 2471.402335][T28949] kmem_cache_alloc+0x63/0x3b0 [ 2471.404021][T28949] vm_area_dup+0x23/0x300 [ 2471.405574][T28949] __split_vma+0x199/0x830 [ 2471.407161][T28949] ? expand_stack+0x20/0x20 [ 2471.409120][T28949] do_vmi_align_munmap+0x400/0x1580 [ 2471.411132][T28949] ? __split_vma+0x830/0x830 [ 2471.412968][T28949] ? mtree_range_walk+0x63e/0x940 [ 2471.414809][T28949] do_vmi_munmap+0x26e/0x2c0 [ 2471.416532][T28949] mmap_region+0x1f0/0x28d0 [ 2471.418237][T28949] ? arch_get_unmapped_area+0x560/0x560 [ 2471.420655][T28949] ? validate_mm+0x1d4/0x290 [ 2471.422447][T28949] ? do_munmap+0xf0/0xf0 [ 2471.424096][T28949] ? security_mmap_addr+0x77/0xa0 [ 2471.426056][T28949] ? get_unmapped_area+0x1e8/0x3c0 [ 2471.428121][T28949] do_mmap+0x831/0xf60 [ 2471.429707][T28949] vm_mmap_pgoff+0x1a2/0x3b0 [ 2471.431428][T28949] ? randomize_page+0xb0/0xb0 [ 2471.433293][T28949] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.435099][T28949] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2471.437241][T28949] __do_fast_syscall_32+0x65/0xf0 [ 2471.439081][T28949] do_fast_syscall_32+0x33/0x70 [ 2471.440972][T28949] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.443749][T28949] RIP: 0023:0xf7f51579 [ 2471.445216][T28949] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.453045][T28949] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2471.456667][T28949] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2471.460109][T28949] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.463571][T28949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.466976][T28949] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.470422][T28949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.473449][T28949] 14:32:06 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, 0x0, 0x44ded1482a631762}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000200)={0xcf, r2, r3, 0xcccccccc}) 14:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x2400) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) read$usbfs(r2, &(0x7f0000000180)=""/28, 0x1c) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff0600ff53870191236ae9cd270004f2901a00301ac27eb0e85abe25a6fb6edeb8c0f7ca0400012bbd7000fcdbdf", @ANYRES32=r2, @ANYBLOB="0900020073797a32df55a7c5ea1f7cd973aa000000000800011801000000050054000100000008000100010033000005003300000000000900020073797a30000000000900020073797a3100000000969a07e4ac191ae28de6a76cda5513ab6f2effe0735e613366747b5b86ac835dbb11382b26275f39813ec733139def66f51f41c676aa433b44485359b212ef8bc8f76df9231743c1b359a58224ce65d7be13740819615d5f8124d9dc0379f8a7566309ef85218d1ad3285eb9fdc2419c36c738ccc6e3999ad9f4906faf52cdbba1"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000001, 0x440) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x1010, r1, 0x30000) (async) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x1010, r1, 0x30000) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000040)) [ 2471.474526][T28950] CPU: 0 PID: 28950 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2471.479063][T28950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2471.482779][T28950] Call Trace: 14:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 7) 14:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x10400) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400480) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x7, 0x2, 0x1}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2471.484236][T28950] [ 2471.485626][T28950] dump_stack_lvl+0x136/0x150 [ 2471.487704][T28950] should_fail_ex+0x4a3/0x5b0 [ 2471.489796][T28950] should_failslab+0x9/0x20 [ 2471.491693][T28950] kmem_cache_alloc+0x63/0x3b0 [ 2471.493694][T28950] ? mas_prev+0x168/0x720 [ 2471.495546][T28950] vm_area_alloc+0x20/0x230 [ 2471.496772][T28969] FAULT_INJECTION: forcing a failure. [ 2471.496772][T28969] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.497456][T28950] mmap_region+0x407/0x28d0 [ 2471.497485][T28950] ? validate_mm+0x1d4/0x290 [ 2471.505756][T28950] ? do_munmap+0xf0/0xf0 [ 2471.507596][T28950] ? security_mmap_addr+0x77/0xa0 [ 2471.509731][T28950] ? get_unmapped_area+0x1e8/0x3c0 [ 2471.511883][T28950] do_mmap+0x831/0xf60 [ 2471.513621][T28950] vm_mmap_pgoff+0x1a2/0x3b0 [ 2471.515659][T28950] ? randomize_page+0xb0/0xb0 [ 2471.517744][T28950] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.519826][T28950] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2471.522175][T28950] __do_fast_syscall_32+0x65/0xf0 [ 2471.524335][T28950] do_fast_syscall_32+0x33/0x70 [ 2471.526427][T28950] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.529063][T28950] RIP: 0023:0xf7f8b579 [ 2471.530809][T28950] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.538651][T28950] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2471.542164][T28950] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2471.545472][T28950] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.548897][T28950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.552236][T28950] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.555629][T28950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.559083][T28950] [ 2471.560451][T28969] CPU: 2 PID: 28969 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2471.565026][T28969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2471.568964][T28969] Call Trace: [ 2471.570471][T28969] [ 2471.571802][T28969] dump_stack_lvl+0x136/0x150 [ 2471.573905][T28969] should_fail_ex+0x4a3/0x5b0 [ 2471.576242][T28969] should_failslab+0x9/0x20 [ 2471.578365][T28969] kmem_cache_alloc+0x63/0x3b0 [ 2471.580496][T28969] vm_area_dup+0x55/0x300 14:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 13) 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000080)) 14:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x10400) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400480) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x7, 0x2, 0x1}) (async, rerun: 64) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (rerun: 64) [ 2471.582371][T28969] __split_vma+0x199/0x830 [ 2471.584427][T28969] ? expand_stack+0x20/0x20 [ 2471.586487][T28969] do_vmi_align_munmap+0x400/0x1580 [ 2471.588826][T28969] ? __split_vma+0x830/0x830 [ 2471.590877][T28969] ? mtree_range_walk+0x63e/0x940 [ 2471.593159][T28969] do_vmi_munmap+0x26e/0x2c0 [ 2471.595274][T28969] mmap_region+0x1f0/0x28d0 [ 2471.597283][T28969] ? arch_get_unmapped_area+0x560/0x560 [ 2471.599769][T28969] ? validate_mm+0x1d4/0x290 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000080)) 14:32:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x10400) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400480) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x7, 0x2, 0x1}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x10400) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400480) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x7, 0x2, 0x1}) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) [ 2471.601858][T28969] ? do_munmap+0xf0/0xf0 [ 2471.603861][T28969] ? security_mmap_addr+0x77/0xa0 [ 2471.606117][T28969] ? get_unmapped_area+0x1e8/0x3c0 [ 2471.608330][T28969] do_mmap+0x831/0xf60 [ 2471.610157][T28969] vm_mmap_pgoff+0x1a2/0x3b0 [ 2471.612264][T28969] ? randomize_page+0xb0/0xb0 [ 2471.614392][T28969] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.616569][T28969] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2471.616970][T28980] FAULT_INJECTION: forcing a failure. [ 2471.616970][T28980] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.618957][T28969] __do_fast_syscall_32+0x65/0xf0 [ 2471.625835][T28969] do_fast_syscall_32+0x33/0x70 [ 2471.628045][T28969] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.630814][T28969] RIP: 0023:0xf7f51579 [ 2471.632522][T28969] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.640848][T28969] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2471.644561][T28969] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2471.648000][T28969] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.651523][T28969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.655040][T28969] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.658548][T28969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.661876][T28969] 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000080)) [ 2471.663543][T28980] CPU: 3 PID: 28980 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2471.667590][T28980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2471.670799][T28980] Call Trace: [ 2471.672056][T28980] [ 2471.673138][T28980] dump_stack_lvl+0x136/0x150 [ 2471.674844][T28980] should_fail_ex+0x4a3/0x5b0 [ 2471.676827][T28980] should_failslab+0x9/0x20 [ 2471.678831][T28980] kmem_cache_alloc+0x63/0x3b0 [ 2471.680949][T28980] vm_area_alloc+0x142/0x230 14:32:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 8) [ 2471.683000][T28980] mmap_region+0x407/0x28d0 [ 2471.685001][T28980] ? validate_mm+0x1d4/0x290 [ 2471.686663][T28980] ? do_munmap+0xf0/0xf0 [ 2471.688189][T28980] ? security_mmap_addr+0x77/0xa0 [ 2471.689973][T28980] ? get_unmapped_area+0x1e8/0x3c0 [ 2471.691809][T28980] do_mmap+0x831/0xf60 [ 2471.693270][T28980] vm_mmap_pgoff+0x1a2/0x3b0 [ 2471.694916][T28980] ? randomize_page+0xb0/0xb0 [ 2471.696607][T28980] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.698311][T28980] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2471.698798][T28989] FAULT_INJECTION: forcing a failure. [ 2471.698798][T28989] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.700231][T28980] __do_fast_syscall_32+0x65/0xf0 [ 2471.700251][T28980] do_fast_syscall_32+0x33/0x70 [ 2471.700260][T28980] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.700271][T28980] RIP: 0023:0xf7f8b579 [ 2471.700280][T28980] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.700290][T28980] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2471.723017][T28980] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2471.725813][T28980] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.728646][T28980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.731716][T28980] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.735027][T28980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.738038][T28980] [ 2471.739142][T28989] CPU: 2 PID: 28989 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 14:32:06 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000013, r0, 0x7) [ 2471.743780][T28989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2471.747855][T28989] Call Trace: [ 2471.749369][T28989] [ 2471.750727][T28989] dump_stack_lvl+0x136/0x150 14:32:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 14) 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x48, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) [ 2471.752853][T28989] should_fail_ex+0x4a3/0x5b0 [ 2471.755007][T28989] should_failslab+0x9/0x20 [ 2471.757002][T28989] kmem_cache_alloc+0x63/0x3b0 [ 2471.759128][T28989] mas_alloc_nodes+0x4dd/0x880 [ 2471.761274][T28989] mas_preallocate+0x1bb/0x360 [ 2471.763435][T28989] __split_vma+0x1b7/0x830 [ 2471.765448][T28989] ? expand_stack+0x20/0x20 [ 2471.767453][T28989] do_vmi_align_munmap+0x400/0x1580 [ 2471.769755][T28989] ? __split_vma+0x830/0x830 [ 2471.771774][T28989] ? mtree_range_walk+0x63e/0x940 [ 2471.774019][T28989] do_vmi_munmap+0x26e/0x2c0 [ 2471.774385][T28994] FAULT_INJECTION: forcing a failure. [ 2471.774385][T28994] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.776109][T28989] mmap_region+0x1f0/0x28d0 [ 2471.776139][T28989] ? arch_get_unmapped_area+0x560/0x560 [ 2471.785136][T28989] ? validate_mm+0x1d4/0x290 [ 2471.787195][T28989] ? do_munmap+0xf0/0xf0 [ 2471.789018][T28989] ? security_mmap_addr+0x77/0xa0 [ 2471.791250][T28989] ? get_unmapped_area+0x1e8/0x3c0 [ 2471.793572][T28989] do_mmap+0x831/0xf60 [ 2471.795416][T28989] vm_mmap_pgoff+0x1a2/0x3b0 [ 2471.797537][T28989] ? randomize_page+0xb0/0xb0 [ 2471.799661][T28989] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.801804][T28989] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2471.804207][T28989] __do_fast_syscall_32+0x65/0xf0 [ 2471.806487][T28989] do_fast_syscall_32+0x33/0x70 [ 2471.808596][T28989] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.811292][T28989] RIP: 0023:0xf7f51579 [ 2471.813038][T28989] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.821440][T28989] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2471.825109][T28989] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2471.828394][T28989] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.831732][T28989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.835174][T28989] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.838561][T28989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.842062][T28989] 14:32:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x48, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:06 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000013, r0, 0x7) [ 2471.843277][T28994] CPU: 3 PID: 28994 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2471.848070][T28994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2471.851888][T28994] Call Trace: [ 2471.853363][T28994] [ 2471.854691][T28994] dump_stack_lvl+0x136/0x150 [ 2471.856782][T28994] should_fail_ex+0x4a3/0x5b0 [ 2471.858892][T28994] should_failslab+0x9/0x20 [ 2471.860967][T28994] __kmem_cache_alloc_node+0x5b/0x320 14:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 9) [ 2471.863368][T28994] ? usbdev_mmap+0x1c6/0xb20 [ 2471.865657][T28994] ? mark_held_locks+0x9f/0xe0 [ 2471.867849][T28994] kmalloc_trace+0x26/0xe0 14:32:07 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000013, r0, 0x7) [ 2471.869851][T28994] usbdev_mmap+0x1c6/0xb20 [ 2471.871991][T28994] ? usbdev_vm_close+0x50/0x50 [ 2471.873589][T29005] FAULT_INJECTION: forcing a failure. [ 2471.873589][T29005] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.874042][T28994] ? __raw_spin_lock_init+0x3a/0x110 [ 2471.880917][T28994] mmap_region+0x694/0x28d0 [ 2471.882669][T28994] ? do_munmap+0xf0/0xf0 [ 2471.884529][T28994] ? security_mmap_addr+0x77/0xa0 [ 2471.886591][T28994] ? get_unmapped_area+0x1e8/0x3c0 [ 2471.888868][T28994] do_mmap+0x831/0xf60 [ 2471.890702][T28994] vm_mmap_pgoff+0x1a2/0x3b0 [ 2471.892657][T28994] ? randomize_page+0xb0/0xb0 [ 2471.895281][T28994] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.897431][T28994] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 14:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2471.899607][T28994] __do_fast_syscall_32+0x65/0xf0 [ 2471.901945][T28994] do_fast_syscall_32+0x33/0x70 [ 2471.904135][T28994] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.907002][T28994] RIP: 0023:0xf7f8b579 [ 2471.908837][T28994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.917260][T28994] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 14:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2471.920881][T28994] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2471.924444][T28994] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2471.927830][T28994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2471.931245][T28994] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.934765][T28994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.938197][T28994] [ 2471.939572][T29005] CPU: 2 PID: 29005 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2471.944001][T29005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2471.947635][T29005] Call Trace: [ 2471.949013][T29005] [ 2471.950266][T29005] dump_stack_lvl+0x136/0x150 [ 2471.952315][T29005] should_fail_ex+0x4a3/0x5b0 [ 2471.954356][T29005] should_failslab+0x9/0x20 14:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 15) 14:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x48, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x48, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) (async) [ 2471.956433][T29005] kmem_cache_alloc_bulk+0x68/0x860 [ 2471.958560][T29005] ? kmem_cache_alloc+0x337/0x3b0 [ 2471.960532][T29005] mas_alloc_nodes+0x332/0x880 [ 2471.962234][T29005] mas_preallocate+0x1bb/0x360 [ 2471.963931][T29005] __split_vma+0x1b7/0x830 [ 2471.965530][T29005] ? expand_stack+0x20/0x20 [ 2471.967180][T29005] do_vmi_align_munmap+0x400/0x1580 [ 2471.969026][T29005] ? __split_vma+0x830/0x830 [ 2471.970686][T29005] ? mtree_range_walk+0x63e/0x940 [ 2471.972494][T29005] do_vmi_munmap+0x26e/0x2c0 [ 2471.972967][T29024] FAULT_INJECTION: forcing a failure. [ 2471.972967][T29024] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.974146][T29005] mmap_region+0x1f0/0x28d0 [ 2471.974163][T29005] ? arch_get_unmapped_area+0x560/0x560 [ 2471.974176][T29005] ? validate_mm+0x1d4/0x290 [ 2471.974188][T29005] ? do_munmap+0xf0/0xf0 [ 2471.974202][T29005] ? security_mmap_addr+0x77/0xa0 [ 2471.974214][T29005] ? get_unmapped_area+0x1e8/0x3c0 [ 2471.991061][T29005] do_mmap+0x831/0xf60 [ 2471.992798][T29005] vm_mmap_pgoff+0x1a2/0x3b0 [ 2471.994822][T29005] ? randomize_page+0xb0/0xb0 [ 2471.996496][T29005] ksys_mmap_pgoff+0x41f/0x5a0 [ 2471.998425][T29005] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2472.000697][T29005] __do_fast_syscall_32+0x65/0xf0 [ 2472.002953][T29005] do_fast_syscall_32+0x33/0x70 [ 2472.005103][T29005] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.007430][T29005] RIP: 0023:0xf7f51579 [ 2472.008880][T29005] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.016730][T29005] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.019804][T29005] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2472.022679][T29005] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.026018][T29005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.029167][T29005] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.032641][T29005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.035736][T29005] 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x4c000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000380)={0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x1, 0x0, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) [ 2472.036902][T29024] CPU: 1 PID: 29024 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.041754][T29024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2472.045707][T29024] Call Trace: 14:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 10) 14:32:07 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x4c000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000380)={0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x1, 0x0, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x4c000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000380)={0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x1, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) [ 2472.047236][T29024] [ 2472.048729][T29024] dump_stack_lvl+0x136/0x150 [ 2472.050607][T29024] should_fail_ex+0x4a3/0x5b0 [ 2472.052631][T29024] should_failslab+0x9/0x20 [ 2472.054194][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.054778][T29024] __kmem_cache_alloc_node+0x5b/0x320 [ 2472.057309][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.059668][T29024] ? usbdev_mmap+0x1c6/0xb20 [ 2472.063701][T29024] ? mark_held_locks+0x9f/0xe0 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x4c000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000380)={0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000380)={0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x1, 0x0, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) [ 2472.065718][T29024] kmalloc_trace+0x26/0xe0 [ 2472.067884][T29024] usbdev_mmap+0x1c6/0xb20 [ 2472.069797][T29024] ? usbdev_vm_close+0x50/0x50 [ 2472.071871][T29024] ? __raw_spin_lock_init+0x3a/0x110 [ 2472.074313][T29024] mmap_region+0x694/0x28d0 [ 2472.076257][T29024] ? do_munmap+0xf0/0xf0 [ 2472.077913][T29024] ? security_mmap_addr+0x77/0xa0 [ 2472.080033][T29024] ? get_unmapped_area+0x1e8/0x3c0 [ 2472.082371][T29024] do_mmap+0x831/0xf60 [ 2472.084269][T29024] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.086440][T29024] ? randomize_page+0xb0/0xb0 [ 2472.088646][T29024] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.090875][T29024] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2472.093356][T29024] __do_fast_syscall_32+0x65/0xf0 [ 2472.095684][T29024] do_fast_syscall_32+0x33/0x70 [ 2472.097927][T29024] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.100865][T29024] RIP: 0023:0xf7f8b579 [ 2472.102723][T29024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.111495][T29024] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.115263][T29024] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2472.118863][T29024] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.122516][T29024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.126140][T29024] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.129751][T29024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.133385][T29024] [ 2472.134885][ C1] vkms_vblank_simulate: vblank timer overrun 14:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 16) 14:32:07 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) 14:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 11) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x8, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 12) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x8, 0x0, 0xe0e0e0e0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:07 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) [ 2472.172803][T29048] FAULT_INJECTION: forcing a failure. [ 2472.172803][T29048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2472.179343][T29048] CPU: 2 PID: 29048 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.183991][T29048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2472.185643][T29050] FAULT_INJECTION: forcing a failure. 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x8, 0x0, 0xe0e0e0e0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2472.185643][T29050] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.188070][T29048] Call Trace: [ 2472.188079][T29048] [ 2472.196644][T29048] dump_stack_lvl+0x136/0x150 [ 2472.198607][T29048] should_fail_ex+0x4a3/0x5b0 [ 2472.200596][T29048] prepare_alloc_pages+0x178/0x570 [ 2472.202802][T29048] __alloc_pages+0x149/0x4a0 [ 2472.204900][T29048] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2472.208002][T29048] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2472.210562][T29048] ? pat_enabled+0x20/0x20 [ 2472.212243][T29048] ? walk_mem_res+0x160/0x160 [ 2472.214424][T29048] alloc_pages+0x1aa/0x270 [ 2472.216405][T29048] pte_alloc_one+0x1a/0x230 [ 2472.218152][T29048] __pte_alloc+0x6d/0x260 [ 2472.219799][T29048] ? pmd_install+0x160/0x160 [ 2472.221781][T29048] remap_pfn_range_notrack+0x9fb/0xea0 [ 2472.224252][T29048] ? apply_to_existing_page_range+0x40/0x40 [ 2472.226822][T29048] remap_pfn_range+0xca/0x140 [ 2472.228892][T29048] ? remap_pfn_range_notrack+0xea0/0xea0 [ 2472.231384][T29048] usbdev_mmap+0x7df/0xb20 [ 2472.233356][T29048] ? usbdev_vm_close+0x50/0x50 [ 2472.235447][T29048] ? __raw_spin_lock_init+0x3a/0x110 [ 2472.237609][T29048] mmap_region+0x694/0x28d0 [ 2472.239554][T29048] ? do_munmap+0xf0/0xf0 [ 2472.241611][T29048] ? security_mmap_addr+0x77/0xa0 [ 2472.243667][T29048] ? get_unmapped_area+0x1e8/0x3c0 [ 2472.245875][T29048] do_mmap+0x831/0xf60 [ 2472.247446][T29048] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.249155][T29048] ? randomize_page+0xb0/0xb0 [ 2472.250879][T29048] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.252650][T29048] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2472.254621][T29048] __do_fast_syscall_32+0x65/0xf0 [ 2472.256487][T29048] do_fast_syscall_32+0x33/0x70 [ 2472.258264][T29048] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.260579][T29048] RIP: 0023:0xf7f8b579 [ 2472.262089][T29048] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.269791][T29048] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.273475][T29048] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2472.276958][T29048] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.279873][T29048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.282895][T29048] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.286249][T29048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.289649][T29048] [ 2472.290762][T29050] CPU: 0 PID: 29050 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.295505][T29050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2472.299518][T29050] Call Trace: 14:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 17) 14:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x120100, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x5, 0x3, 0x7, 0x6, 0xd6, 0x2, &(0x7f0000000100)="19ab30e55efc37dd4050df581aa499d4b9a587e97ac0151da50e2e51425f7c0fc4d05201d59ed50c31d27dca40794c080811b1a7ddc4863b7a66a7e3022ff6c02b05bef92109b601616df99c410fc030a5d5c7f9bbf821e0be85c9208a7b5ca53c3dd0f1ffeb014ddbd19d8e5e340eecfd41c0796e402bcef6d6cfd5f0732e7163362a910c17a5bacfb864ccdc051729b19fa4f7cbe5b18b68ad677071b572331fb9d937a2aeff2e45863053250d445d5ff04ae0cfefec4806e2fd30bc278adb0ca20072c40e71f33b933d912381ed6364845f0e4232"}) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2472.301048][T29050] [ 2472.302450][T29050] dump_stack_lvl+0x136/0x150 [ 2472.304484][T29050] should_fail_ex+0x4a3/0x5b0 [ 2472.306384][T29050] should_failslab+0x9/0x20 [ 2472.308369][T29050] kmem_cache_alloc+0x63/0x3b0 [ 2472.310537][T29050] ? mas_prev+0x168/0x720 [ 2472.312524][T29050] vm_area_alloc+0x20/0x230 [ 2472.314627][T29050] mmap_region+0x407/0x28d0 [ 2472.316710][T29050] ? validate_mm+0x1d4/0x290 [ 2472.318663][T29063] FAULT_INJECTION: forcing a failure. [ 2472.318663][T29063] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.318823][T29050] ? do_munmap+0xf0/0xf0 [ 2472.326298][T29050] ? security_mmap_addr+0x77/0xa0 [ 2472.328639][T29050] ? get_unmapped_area+0x1e8/0x3c0 [ 2472.330957][T29050] do_mmap+0x831/0xf60 [ 2472.332772][T29050] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.334807][T29050] ? randomize_page+0xb0/0xb0 [ 2472.337008][T29050] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.338847][T29050] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2472.340954][T29050] __do_fast_syscall_32+0x65/0xf0 [ 2472.342973][T29050] do_fast_syscall_32+0x33/0x70 [ 2472.344877][T29050] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.347284][T29050] RIP: 0023:0xf7f51579 [ 2472.348760][T29050] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.355647][T29050] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.358711][T29050] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2472.361557][T29050] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.364429][T29050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.367543][T29050] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.370576][T29050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.373726][T29050] 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2472.374927][T29063] CPU: 3 PID: 29063 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.379711][T29063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 14:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 13) 14:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x120100, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x5, 0x3, 0x7, 0x6, 0xd6, 0x2, &(0x7f0000000100)="19ab30e55efc37dd4050df581aa499d4b9a587e97ac0151da50e2e51425f7c0fc4d05201d59ed50c31d27dca40794c080811b1a7ddc4863b7a66a7e3022ff6c02b05bef92109b601616df99c410fc030a5d5c7f9bbf821e0be85c9208a7b5ca53c3dd0f1ffeb014ddbd19d8e5e340eecfd41c0796e402bcef6d6cfd5f0732e7163362a910c17a5bacfb864ccdc051729b19fa4f7cbe5b18b68ad677071b572331fb9d937a2aeff2e45863053250d445d5ff04ae0cfefec4806e2fd30bc278adb0ca20072c40e71f33b933d912381ed6364845f0e4232"}) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2472.383496][T29063] Call Trace: [ 2472.385072][T29063] [ 2472.386090][T29063] dump_stack_lvl+0x136/0x150 [ 2472.387691][T29063] should_fail_ex+0x4a3/0x5b0 [ 2472.389380][T29063] should_failslab+0x9/0x20 [ 2472.391048][T29063] kmem_cache_alloc+0x63/0x3b0 [ 2472.392753][T29063] ptlock_alloc+0x21/0x70 [ 2472.394379][T29063] pte_alloc_one+0x6c/0x230 [ 2472.396125][T29063] __pte_alloc+0x6d/0x260 [ 2472.397125][T29072] FAULT_INJECTION: forcing a failure. [ 2472.397125][T29072] name failslab, interval 1, probability 0, space 0, times 0 14:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x120100, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x5, 0x3, 0x7, 0x6, 0xd6, 0x2, &(0x7f0000000100)="19ab30e55efc37dd4050df581aa499d4b9a587e97ac0151da50e2e51425f7c0fc4d05201d59ed50c31d27dca40794c080811b1a7ddc4863b7a66a7e3022ff6c02b05bef92109b601616df99c410fc030a5d5c7f9bbf821e0be85c9208a7b5ca53c3dd0f1ffeb014ddbd19d8e5e340eecfd41c0796e402bcef6d6cfd5f0732e7163362a910c17a5bacfb864ccdc051729b19fa4f7cbe5b18b68ad677071b572331fb9d937a2aeff2e45863053250d445d5ff04ae0cfefec4806e2fd30bc278adb0ca20072c40e71f33b933d912381ed6364845f0e4232"}) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x5, 0x3, 0x7, 0x6, 0xd6, 0x2, &(0x7f0000000100)="19ab30e55efc37dd4050df581aa499d4b9a587e97ac0151da50e2e51425f7c0fc4d05201d59ed50c31d27dca40794c080811b1a7ddc4863b7a66a7e3022ff6c02b05bef92109b601616df99c410fc030a5d5c7f9bbf821e0be85c9208a7b5ca53c3dd0f1ffeb014ddbd19d8e5e340eecfd41c0796e402bcef6d6cfd5f0732e7163362a910c17a5bacfb864ccdc051729b19fa4f7cbe5b18b68ad677071b572331fb9d937a2aeff2e45863053250d445d5ff04ae0cfefec4806e2fd30bc278adb0ca20072c40e71f33b933d912381ed6364845f0e4232"}) [ 2472.397821][T29063] ? pmd_install+0x160/0x160 [ 2472.397842][T29063] remap_pfn_range_notrack+0x9fb/0xea0 [ 2472.397858][T29063] ? apply_to_existing_page_range+0x40/0x40 [ 2472.410108][T29063] remap_pfn_range+0xca/0x140 [ 2472.412175][T29063] ? remap_pfn_range_notrack+0xea0/0xea0 [ 2472.414393][T29063] usbdev_mmap+0x7df/0xb20 [ 2472.416194][T29063] ? usbdev_vm_close+0x50/0x50 [ 2472.418089][T29063] ? __raw_spin_lock_init+0x3a/0x110 [ 2472.420204][T29063] mmap_region+0x694/0x28d0 [ 2472.422011][T29063] ? do_munmap+0xf0/0xf0 [ 2472.423976][T29063] ? security_mmap_addr+0x77/0xa0 [ 2472.426269][T29063] ? get_unmapped_area+0x1e8/0x3c0 [ 2472.428549][T29063] do_mmap+0x831/0xf60 [ 2472.430335][T29063] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.432244][T29063] ? randomize_page+0xb0/0xb0 [ 2472.433965][T29063] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.435532][T29063] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2472.437811][T29063] __do_fast_syscall_32+0x65/0xf0 [ 2472.439970][T29063] do_fast_syscall_32+0x33/0x70 [ 2472.441875][T29063] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.444405][T29063] RIP: 0023:0xf7f8b579 [ 2472.445934][T29063] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.454002][T29063] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.457568][T29063] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2472.460462][T29063] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.463353][T29063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.466390][T29063] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.469339][T29063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.472472][T29063] [ 2472.473837][T29072] CPU: 0 PID: 29072 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.478499][T29072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2472.481890][T29072] Call Trace: [ 2472.483136][T29072] [ 2472.484453][T29072] dump_stack_lvl+0x136/0x150 [ 2472.486126][T29072] should_fail_ex+0x4a3/0x5b0 [ 2472.487836][T29072] should_failslab+0x9/0x20 [ 2472.489662][T29072] kmem_cache_alloc+0x63/0x3b0 [ 2472.491629][T29072] vm_area_alloc+0x142/0x230 [ 2472.493659][T29072] mmap_region+0x407/0x28d0 [ 2472.495492][T29072] ? validate_mm+0x1d4/0x290 [ 2472.497552][T29072] ? do_munmap+0xf0/0xf0 [ 2472.499434][T29072] ? security_mmap_addr+0x77/0xa0 [ 2472.501680][T29072] ? get_unmapped_area+0x1e8/0x3c0 [ 2472.503951][T29072] do_mmap+0x831/0xf60 [ 2472.505780][T29072] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.507866][T29072] ? randomize_page+0xb0/0xb0 [ 2472.509851][T29072] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.511785][T29072] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 14:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 18) 14:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x100800, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x59d5, "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"}) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x542, 0x240000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x100800, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x59d5, "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"}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x100800}) (async) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x59d5, "ad995baed75e2f40354ecd7b90d0e9e3fa9e2aeff4a31d311ff3c62d40ce7a9a895968f6896e30de9b303e099e095f043b998505b1237d7c566e38a1674e92bb04ee1413f2ad8bf0a6a0f5bf33728e82e61ffc6fb35b281671f2798d35ed797b8615ae683eacfdeac79fbba738d0553b168a39b7cef9624c907b39ac9faa04d51b6a5b2fe17864ded5f33293b8c0f7b2a8ad00e756a871dac326a5992e83cb8a31d7714e02f3c4d47a4d5119a8fa1dde4b5140f3273e8541f67b5ec28098a661a6580d361146c356101cb9d63460200206b6dff4a1b393add9674d7d00d7774b6e9cbc21a3f4239190b55ef1c234efe85983cf7d0531dc35b3517c5992b65dab"}) (async) [ 2472.514168][T29072] __do_fast_syscall_32+0x65/0xf0 [ 2472.516632][T29072] do_fast_syscall_32+0x33/0x70 [ 2472.517198][T29081] FAULT_INJECTION: forcing a failure. [ 2472.517198][T29081] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.518765][T29072] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.518786][T29072] RIP: 0023:0xf7f51579 [ 2472.518800][T29072] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.534658][T29072] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.537470][T29072] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2472.540894][T29072] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.544277][T29072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.547735][T29072] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.550745][T29072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.553926][T29072] [ 2472.554909][T29081] CPU: 1 PID: 29081 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.558796][T29081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2472.562349][T29081] Call Trace: [ 2472.563730][T29081] [ 2472.564933][T29081] dump_stack_lvl+0x136/0x150 [ 2472.566819][T29081] should_fail_ex+0x4a3/0x5b0 [ 2472.568742][T29081] should_failslab+0x9/0x20 14:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 14) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x542, 0x240000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x542, 0x240000) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) 14:32:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x100800, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x59d5, "ad995baed75e2f40354ecd7b90d0e9e3fa9e2aeff4a31d311ff3c62d40ce7a9a895968f6896e30de9b303e099e095f043b998505b1237d7c566e38a1674e92bb04ee1413f2ad8bf0a6a0f5bf33728e82e61ffc6fb35b281671f2798d35ed797b8615ae683eacfdeac79fbba738d0553b168a39b7cef9624c907b39ac9faa04d51b6a5b2fe17864ded5f33293b8c0f7b2a8ad00e756a871dac326a5992e83cb8a31d7714e02f3c4d47a4d5119a8fa1dde4b5140f3273e8541f67b5ec28098a661a6580d361146c356101cb9d63460200206b6dff4a1b393add9674d7d00d7774b6e9cbc21a3f4239190b55ef1c234efe85983cf7d0531dc35b3517c5992b65dab"}) [ 2472.570580][T29081] kmem_cache_alloc+0x63/0x3b0 [ 2472.572784][T29081] mas_alloc_nodes+0x4dd/0x880 [ 2472.574743][T29081] mas_preallocate+0x1bb/0x360 [ 2472.576692][T29081] mmap_region+0x84c/0x28d0 [ 2472.578558][T29081] ? do_munmap+0xf0/0xf0 [ 2472.580288][T29081] ? security_mmap_addr+0x77/0xa0 [ 2472.580379][T29095] FAULT_INJECTION: forcing a failure. [ 2472.580379][T29095] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.582330][T29081] ? get_unmapped_area+0x1e8/0x3c0 14:32:07 executing program 3: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x698800, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000200)={0x80000001, "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"}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x40, 0x17, 0x3, 0x0, 0xd9, 0xb6, &(0x7f0000000100)="70b3d996c036a94768c74a823504f8af25f3dac451b62b13e074bfdcd27dfc72ba50675ad9fb46e66f78cb6af3a9fdd1e4196c466c5b77d55b3e2a4668b3a592f4e79b853d170fd637493efa88d0617dffc91134386bf83c9719edc7ed2175ea6f9c03c11cb736017f06c312e4df2fd4793a66f3d37cf7bd257d614ef19709d05814d8a2d791400666bfa1da917703b94df1e8c4fddca9a08faef7f769ae7e7c59cf4810a68653bd4299e863547919c67e40f0f1f3fee6d69fe450d564435920004a3b59df90f7b4e18647127d18c3752142311a26f021ee4c"}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000340)) [ 2472.582354][T29081] do_mmap+0x831/0xf60 [ 2472.582377][T29081] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.593022][T29081] ? randomize_page+0xb0/0xb0 [ 2472.594910][T29081] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.596844][T29081] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2472.598992][T29081] __do_fast_syscall_32+0x65/0xf0 [ 2472.601034][T29081] do_fast_syscall_32+0x33/0x70 [ 2472.602997][T29081] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.605508][T29081] RIP: 0023:0xf7f8b579 [ 2472.607173][T29081] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.614831][T29081] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.618168][T29081] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2472.621344][T29081] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.624554][T29081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.627750][T29081] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.630926][T29081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.634084][T29081] [ 2472.635342][T29095] CPU: 0 PID: 29095 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.635413][ C1] vkms_vblank_simulate: vblank timer overrun [ 2472.640040][T29095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2472.646716][T29095] Call Trace: [ 2472.648227][T29095] [ 2472.649567][T29095] dump_stack_lvl+0x136/0x150 [ 2472.651486][T29095] should_fail_ex+0x4a3/0x5b0 [ 2472.653383][T29095] should_failslab+0x9/0x20 [ 2472.655289][T29095] __kmem_cache_alloc_node+0x5b/0x320 [ 2472.657632][T29095] ? usbdev_mmap+0x1c6/0xb20 [ 2472.659694][T29095] ? mark_held_locks+0x9f/0xe0 [ 2472.661868][T29095] kmalloc_trace+0x26/0xe0 [ 2472.663905][T29095] usbdev_mmap+0x1c6/0xb20 [ 2472.665922][T29095] ? usbdev_vm_close+0x50/0x50 [ 2472.668005][T29095] ? __raw_spin_lock_init+0x3a/0x110 [ 2472.670359][T29095] mmap_region+0x694/0x28d0 [ 2472.672438][T29095] ? do_munmap+0xf0/0xf0 [ 2472.674364][T29095] ? security_mmap_addr+0x77/0xa0 [ 2472.676651][T29095] ? get_unmapped_area+0x1e8/0x3c0 [ 2472.678953][T29095] do_mmap+0x831/0xf60 [ 2472.680808][T29095] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.682889][T29095] ? randomize_page+0xb0/0xb0 [ 2472.685021][T29095] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.687196][T29095] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2472.689659][T29095] __do_fast_syscall_32+0x65/0xf0 [ 2472.691942][T29095] do_fast_syscall_32+0x33/0x70 [ 2472.694162][T29095] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.697040][T29095] RIP: 0023:0xf7f51579 [ 2472.698917][T29095] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.707724][T29095] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.711546][T29095] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2472.715145][T29095] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.718721][T29095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.722263][T29095] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.725818][T29095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.729406][T29095] 14:32:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 19) 14:32:07 executing program 3: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x698800, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000200)={0x80000001, "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"}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x40, 0x17, 0x3, 0x0, 0xd9, 0xb6, &(0x7f0000000100)="70b3d996c036a94768c74a823504f8af25f3dac451b62b13e074bfdcd27dfc72ba50675ad9fb46e66f78cb6af3a9fdd1e4196c466c5b77d55b3e2a4668b3a592f4e79b853d170fd637493efa88d0617dffc91134386bf83c9719edc7ed2175ea6f9c03c11cb736017f06c312e4df2fd4793a66f3d37cf7bd257d614ef19709d05814d8a2d791400666bfa1da917703b94df1e8c4fddca9a08faef7f769ae7e7c59cf4810a68653bd4299e863547919c67e40f0f1f3fee6d69fe450d564435920004a3b59df90f7b4e18647127d18c3752142311a26f021ee4c"}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000340)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x698800, 0x0) (async) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000200)={0x80000001, "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"}) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x40, 0x17, 0x3, 0x0, 0xd9, 0xb6, &(0x7f0000000100)="70b3d996c036a94768c74a823504f8af25f3dac451b62b13e074bfdcd27dfc72ba50675ad9fb46e66f78cb6af3a9fdd1e4196c466c5b77d55b3e2a4668b3a592f4e79b853d170fd637493efa88d0617dffc91134386bf83c9719edc7ed2175ea6f9c03c11cb736017f06c312e4df2fd4793a66f3d37cf7bd257d614ef19709d05814d8a2d791400666bfa1da917703b94df1e8c4fddca9a08faef7f769ae7e7c59cf4810a68653bd4299e863547919c67e40f0f1f3fee6d69fe450d564435920004a3b59df90f7b4e18647127d18c3752142311a26f021ee4c"}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000340)) (async) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x542, 0x240000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) 14:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 15) 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2472.755354][T29108] FAULT_INJECTION: forcing a failure. 14:32:07 executing program 3: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x698800, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000200)={0x80000001, "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"}) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x40, 0x17, 0x3, 0x0, 0xd9, 0xb6, &(0x7f0000000100)="70b3d996c036a94768c74a823504f8af25f3dac451b62b13e074bfdcd27dfc72ba50675ad9fb46e66f78cb6af3a9fdd1e4196c466c5b77d55b3e2a4668b3a592f4e79b853d170fd637493efa88d0617dffc91134386bf83c9719edc7ed2175ea6f9c03c11cb736017f06c312e4df2fd4793a66f3d37cf7bd257d614ef19709d05814d8a2d791400666bfa1da917703b94df1e8c4fddca9a08faef7f769ae7e7c59cf4810a68653bd4299e863547919c67e40f0f1f3fee6d69fe450d564435920004a3b59df90f7b4e18647127d18c3752142311a26f021ee4c"}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000340)) [ 2472.755354][T29108] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.761360][T29108] CPU: 0 PID: 29108 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.765941][T29108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 14:32:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 16) [ 2472.769924][T29108] Call Trace: [ 2472.771623][T29108] [ 2472.772972][T29108] dump_stack_lvl+0x136/0x150 14:32:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) [ 2472.775118][T29108] should_fail_ex+0x4a3/0x5b0 [ 2472.777351][T29108] should_failslab+0x9/0x20 [ 2472.779339][T29108] kmem_cache_alloc_bulk+0x68/0x860 [ 2472.781509][T29108] ? kmem_cache_alloc+0x337/0x3b0 [ 2472.783753][T29108] mas_alloc_nodes+0x332/0x880 [ 2472.785837][T29119] FAULT_INJECTION: forcing a failure. [ 2472.785837][T29119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2472.791733][T29108] mas_preallocate+0x1bb/0x360 [ 2472.793920][T29108] mmap_region+0x84c/0x28d0 [ 2472.796015][T29108] ? do_munmap+0xf0/0xf0 [ 2472.797945][T29108] ? security_mmap_addr+0x77/0xa0 [ 2472.800264][T29108] ? get_unmapped_area+0x1e8/0x3c0 [ 2472.802635][T29108] do_mmap+0x831/0xf60 [ 2472.804523][T29108] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.806651][T29108] ? randomize_page+0xb0/0xb0 [ 2472.808713][T29108] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.810867][T29108] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2472.813350][T29108] __do_fast_syscall_32+0x65/0xf0 [ 2472.815640][T29108] do_fast_syscall_32+0x33/0x70 [ 2472.817679][T29108] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.819932][T29108] RIP: 0023:0xf7f8b579 [ 2472.821661][T29108] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.830074][T29108] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.833804][T29108] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2472.837255][T29108] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.840129][T29108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.842879][T29108] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.845865][T29108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.849117][T29108] [ 2472.850519][T29119] CPU: 1 PID: 29119 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.855132][T29119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2472.859080][T29119] Call Trace: [ 2472.860592][T29119] 14:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 20) 14:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newnexthop={0xac, 0x68, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x2, 0x0, 0x28}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_ENCAP={0x1c, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x3f, 0x0, 0x1}, {0x200}, {0x6}, {0x3, 0x0, 0x1}, {0x100, 0x0, 0x1}]}}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x2}, {0x1, 0x5}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x841}, 0x20000000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) [ 2472.861918][T29119] dump_stack_lvl+0x136/0x150 [ 2472.864140][T29119] should_fail_ex+0x4a3/0x5b0 [ 2472.866183][T29119] prepare_alloc_pages+0x178/0x570 [ 2472.868459][T29119] __alloc_pages+0x149/0x4a0 [ 2472.870520][T29119] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2472.873542][T29119] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2472.876189][T29119] ? pat_enabled+0x20/0x20 [ 2472.878141][T29119] ? walk_mem_res+0x160/0x160 [ 2472.880241][T29119] alloc_pages+0x1aa/0x270 [ 2472.882246][T29119] pte_alloc_one+0x1a/0x230 [ 2472.884136][T29119] __pte_alloc+0x6d/0x260 14:32:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140), 0x5, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newnexthop={0xac, 0x68, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x2, 0x0, 0x28}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_ENCAP={0x1c, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x3f, 0x0, 0x1}, {0x200}, {0x6}, {0x3, 0x0, 0x1}, {0x100, 0x0, 0x1}]}}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x2}, {0x1, 0x5}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x841}, 0x20000000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2472.886056][T29119] ? pmd_install+0x160/0x160 [ 2472.888227][T29119] remap_pfn_range_notrack+0x9fb/0xea0 [ 2472.890649][T29119] ? apply_to_existing_page_range+0x40/0x40 [ 2472.893099][T29131] FAULT_INJECTION: forcing a failure. [ 2472.893099][T29131] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.893306][T29119] remap_pfn_range+0xca/0x140 [ 2472.899889][T29119] ? remap_pfn_range_notrack+0xea0/0xea0 [ 2472.902395][T29119] usbdev_mmap+0x7df/0xb20 [ 2472.904306][T29119] ? usbdev_vm_close+0x50/0x50 [ 2472.906259][T29119] ? __raw_spin_lock_init+0x3a/0x110 [ 2472.908204][T29119] mmap_region+0x694/0x28d0 [ 2472.910046][T29119] ? do_munmap+0xf0/0xf0 [ 2472.911630][T29119] ? security_mmap_addr+0x77/0xa0 [ 2472.913432][T29119] ? get_unmapped_area+0x1e8/0x3c0 [ 2472.915500][T29119] do_mmap+0x831/0xf60 [ 2472.917283][T29119] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.919148][T29119] ? randomize_page+0xb0/0xb0 [ 2472.920928][T29119] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.922850][T29119] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2472.925151][T29119] __do_fast_syscall_32+0x65/0xf0 [ 2472.927438][T29119] do_fast_syscall_32+0x33/0x70 [ 2472.929659][T29119] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.931898][T29119] RIP: 0023:0xf7f51579 [ 2472.933332][T29119] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.940243][T29119] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2472.943563][T29119] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2472.946992][T29119] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2472.950429][T29119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.953546][T29119] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.956541][T29119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.959445][T29119] 14:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newnexthop={0xac, 0x68, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x2, 0x0, 0x28}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_ENCAP={0x1c, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x3f, 0x0, 0x1}, {0x200}, {0x6}, {0x3, 0x0, 0x1}, {0x100, 0x0, 0x1}]}}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x2}, {0x1, 0x5}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x841}, 0x20000000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2472.960650][T29131] CPU: 0 PID: 29131 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2472.960726][ C1] vkms_vblank_simulate: vblank timer overrun [ 2472.965219][T29131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2472.971133][T29131] Call Trace: [ 2472.972362][T29131] [ 2472.973636][T29131] dump_stack_lvl+0x136/0x150 [ 2472.975376][T29131] should_fail_ex+0x4a3/0x5b0 [ 2472.977110][T29131] should_failslab+0x9/0x20 [ 2472.978804][T29131] kmem_cache_alloc+0x63/0x3b0 [ 2472.980536][T29131] mas_alloc_nodes+0x4dd/0x880 [ 2472.982332][T29131] mas_preallocate+0x1bb/0x360 [ 2472.984246][T29131] mmap_region+0x84c/0x28d0 [ 2472.986128][T29131] ? do_munmap+0xf0/0xf0 [ 2472.987942][T29131] ? security_mmap_addr+0x77/0xa0 [ 2472.989700][T29131] ? get_unmapped_area+0x1e8/0x3c0 [ 2472.991582][T29131] do_mmap+0x831/0xf60 [ 2472.993232][T29131] vm_mmap_pgoff+0x1a2/0x3b0 [ 2472.995159][T29131] ? randomize_page+0xb0/0xb0 [ 2472.996902][T29131] ksys_mmap_pgoff+0x41f/0x5a0 [ 2472.998582][T29131] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2473.000520][T29131] __do_fast_syscall_32+0x65/0xf0 [ 2473.002271][T29131] do_fast_syscall_32+0x33/0x70 [ 2473.004044][T29131] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2473.006387][T29131] RIP: 0023:0xf7f8b579 [ 2473.007831][T29131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2473.014867][T29131] RSP: 002b:00000000f7f865cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2473.017773][T29131] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001002 [ 2473.020505][T29131] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 2473.023345][T29131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2473.026153][T29131] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2473.028623][T29131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2473.031121][T29131] 14:32:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 17) 14:32:08 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140), 0x5, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) 14:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) (fail_nth: 21) 14:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800608b, 0x1ab882) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r0, 0xc76d) 14:32:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140), 0x5, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140), 0x5, 0x8, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r2}) (async) [ 2473.057495][T29149] FAULT_INJECTION: forcing a failure. [ 2473.057495][T29149] name fail_usercopy, interval 1, probability 0, space 0, times 0 14:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800608b, 0x1ab882) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r0, 0xc76d) [ 2473.059915][T29151] FAULT_INJECTION: forcing a failure. [ 2473.059915][T29151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2473.062912][T29149] CPU: 3 PID: 29149 Comm: syz-executor.2 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2473.072292][T29149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2473.075550][T29149] Call Trace: [ 2473.077004][T29149] [ 2473.078250][T29149] dump_stack_lvl+0x136/0x150 [ 2473.080005][T29149] should_fail_ex+0x4a3/0x5b0 [ 2473.081801][T29149] _copy_to_user+0x30/0xc0 [ 2473.083515][T29149] simple_read_from_buffer+0xd0/0x160 [ 2473.085568][T29149] proc_fail_nth_read+0x18b/0x220 [ 2473.087426][T29149] ? proc_exe_link+0x1e0/0x1e0 [ 2473.089222][T29149] ? security_file_permission+0xaf/0xd0 [ 2473.091296][T29149] vfs_read+0x1e1/0x8a0 [ 2473.092921][T29149] ? proc_exe_link+0x1e0/0x1e0 [ 2473.094837][T29149] ? kernel_read+0x1c0/0x1c0 [ 2473.096598][T29149] ? __fget_files+0x26a/0x480 [ 2473.098309][T29149] ksys_read+0x12b/0x250 [ 2473.099981][T29149] ? vfs_write+0xd50/0xd50 [ 2473.101661][T29149] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 2473.104133][T29149] __do_fast_syscall_32+0x65/0xf0 [ 2473.106276][T29149] do_fast_syscall_32+0x33/0x70 [ 2473.108311][T29149] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2473.110785][T29149] RIP: 0023:0xf7f8b579 [ 2473.112556][T29149] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2473.120457][T29149] RSP: 002b:00000000f7f86600 EFLAGS: 00000282 ORIG_RAX: 0000000000000003 [ 2473.123992][T29149] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f7f86690 [ 2473.126934][T29149] RDX: 000000000000000f RSI: 00000000f734e000 RDI: 0000000000000000 [ 2473.130154][T29149] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2473.133496][T29149] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2473.136845][T29149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2473.140091][T29149] [ 2473.141469][T29151] CPU: 1 PID: 29151 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2473.145390][T29151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2473.149149][T29151] Call Trace: [ 2473.150359][T29151] [ 2473.151437][T29151] dump_stack_lvl+0x136/0x150 [ 2473.153182][T29151] should_fail_ex+0x4a3/0x5b0 [ 2473.154869][T29151] prepare_alloc_pages+0x178/0x570 [ 2473.157011][T29151] __alloc_pages+0x149/0x4a0 [ 2473.158759][T29151] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2473.161453][T29151] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2473.163986][T29151] ? pat_enabled+0x20/0x20 [ 2473.165641][T29151] ? walk_mem_res+0x160/0x160 [ 2473.167674][T29151] alloc_pages+0x1aa/0x270 [ 2473.169584][T29151] pte_alloc_one+0x1a/0x230 [ 2473.171301][T29151] __pte_alloc+0x6d/0x260 [ 2473.172973][T29151] ? pmd_install+0x160/0x160 [ 2473.174743][T29151] remap_pfn_range_notrack+0x9fb/0xea0 [ 2473.176911][T29151] ? apply_to_existing_page_range+0x40/0x40 [ 2473.179502][T29151] remap_pfn_range+0xca/0x140 [ 2473.181312][T29151] ? remap_pfn_range_notrack+0xea0/0xea0 [ 2473.183780][T29151] usbdev_mmap+0x7df/0xb20 [ 2473.185756][T29151] ? usbdev_vm_close+0x50/0x50 [ 2473.187835][T29151] ? __raw_spin_lock_init+0x3a/0x110 [ 2473.190121][T29151] mmap_region+0x694/0x28d0 [ 2473.192044][T29151] ? do_munmap+0xf0/0xf0 [ 2473.193685][T29151] ? security_mmap_addr+0x77/0xa0 [ 2473.195561][T29151] ? get_unmapped_area+0x1e8/0x3c0 [ 2473.197445][T29151] do_mmap+0x831/0xf60 [ 2473.198921][T29151] vm_mmap_pgoff+0x1a2/0x3b0 [ 2473.200699][T29151] ? randomize_page+0xb0/0xb0 [ 2473.202401][T29151] ksys_mmap_pgoff+0x41f/0x5a0 [ 2473.204180][T29151] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2473.206190][T29151] __do_fast_syscall_32+0x65/0xf0 [ 2473.208135][T29151] do_fast_syscall_32+0x33/0x70 [ 2473.209955][T29151] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2473.212302][T29151] RIP: 0023:0xf7f51579 [ 2473.213779][T29151] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2473.220963][T29151] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2473.224488][T29151] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2473.227598][T29151] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2473.230493][T29151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2473.233649][T29151] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2473.236663][T29151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2473.239568][T29151] [ 2473.240837][ C1] vkms_vblank_simulate: vblank timer overrun 14:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x0) 14:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800608b, 0x1ab882) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r0, 0xc76d) 14:32:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) (fail_nth: 18) 14:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1003, 0x0, 0x12, r0, 0x0) [ 2473.303547][T29163] FAULT_INJECTION: forcing a failure. [ 2473.303547][T29163] name failslab, interval 1, probability 0, space 0, times 0 14:32:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000040)={r4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={r4}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc01c64b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x2, r5, 0xbbbbbbbb}) [ 2473.309762][T29163] CPU: 1 PID: 29163 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2473.314462][T29163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2473.318393][T29163] Call Trace: [ 2473.319760][T29163] 14:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1758, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 14:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1004, 0x0, 0x12, r0, 0x0) [ 2473.320966][T29163] dump_stack_lvl+0x136/0x150 [ 2473.323330][T29163] should_fail_ex+0x4a3/0x5b0 [ 2473.325222][T29163] should_failslab+0x9/0x20 14:32:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0x0, 0x0, r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x192, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000040)={r4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={r4}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc01c64b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x2, r5, 0xbbbbbbbb}) [ 2473.327008][T29163] kmem_cache_alloc+0x63/0x3b0 [ 2473.329185][T29163] mas_alloc_nodes+0x4dd/0x880 [ 2473.331180][T29163] mas_preallocate+0x1bb/0x360 [ 2473.333273][T29163] mmap_region+0x84c/0x28d0 [ 2473.335374][T29163] ? do_munmap+0xf0/0xf0 [ 2473.337139][T29163] ? security_mmap_addr+0x77/0xa0 [ 2473.339040][T29163] ? get_unmapped_area+0x1e8/0x3c0 14:32:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1758, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2473.341159][T29163] do_mmap+0x831/0xf60 [ 2473.343138][T29163] vm_mmap_pgoff+0x1a2/0x3b0 [ 2473.345273][T29163] ? randomize_page+0xb0/0xb0 14:32:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x608c, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1005, 0x0, 0x12, r0, 0x0) [ 2473.347412][T29163] ksys_mmap_pgoff+0x41f/0x5a0 [ 2473.349543][T29163] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2473.351609][T29163] __do_fast_syscall_32+0x65/0xf0 [ 2473.353722][T29163] do_fast_syscall_32+0x33/0x70 [ 2473.355565][T29163] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2473.357910][T29163] RIP: 0023:0xf7f51579 [ 2473.359402][T29163] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2473.366445][T29163] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2473.370146][T29163] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2473.373001][T29163] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2473.376261][T29163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2473.379427][T29163] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2473.382204][T29163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2473.385169][T29163] [ 2473.386759][ C1] vkms_vblank_simulate: vblank timer overrun [ 2473.390140][T29163] ------------[ cut here ]------------ [ 2473.392568][T29163] kernel BUG at mm/page_table_check.c:148! [ 2473.395023][T29163] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2473.397266][T29163] CPU: 0 PID: 29163 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00305-g022ce8862dff #0 [ 2473.401573][T29163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2473.407041][T29163] RIP: 0010:__page_table_check_zero+0x40a/0x5d0 [ 2473.409379][T29163] Code: 0f 84 f0 fc ff ff e8 e5 43 a2 ff 48 83 eb 01 48 89 dd e9 ea fc ff ff e8 d4 43 a2 ff 0f 0b e8 cd 43 a2 ff 0f 0b e8 c6 43 a2 ff <0f> 0b e8 bf 43 a2 ff 49 8b 6c 24 08 31 ff 48 89 eb 83 e3 01 48 89 [ 2473.416478][T29163] RSP: 0018:ffffc90029b47ac0 EFLAGS: 00010216 [ 2473.418663][T29163] RAX: 00000000000245bc RBX: 0000000000000001 RCX: ffffc90007352000 [ 2473.421741][T29163] RDX: 0000000000040000 RSI: ffffffff81e2031a RDI: 0000000000000005 [ 2473.425073][T29163] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2473.428358][T29163] R10: 0000000000000001 R11: 0000000000094001 R12: ffff888012838d00 [ 2473.431389][T29163] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 2473.434414][T29163] FS: 0000000000000000(0000) GS:ffff88802c600000(0063) knlGS:00000000f7f4cb40 [ 2473.437811][T29163] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2473.440156][T29163] CR2: 00000000f7ea55b6 CR3: 0000000000d11000 CR4: 0000000000350ef0 [ 2473.442971][T29163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2473.446227][T29163] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2473.449603][T29163] Call Trace: [ 2473.451057][T29163] [ 2473.452345][T29163] ? die+0x32/0x90 [ 2473.453895][T29163] ? do_trap+0x1b2/0x3f0 [ 2473.455679][T29163] ? __page_table_check_zero+0x40a/0x5d0 [ 2473.458063][T29163] ? __page_table_check_zero+0x40a/0x5d0 [ 2473.460058][T29163] ? do_error_trap+0xb1/0x170 [ 2473.461753][T29163] ? __page_table_check_zero+0x40a/0x5d0 [ 2473.464087][T29163] ? handle_invalid_op+0x2c/0x30 [ 2473.466206][T29163] ? __page_table_check_zero+0x40a/0x5d0 [ 2473.468308][T29163] ? exc_invalid_op+0x2f/0x50 [ 2473.470003][T29163] ? asm_exc_invalid_op+0x1a/0x20 [ 2473.471785][T29163] ? __page_table_check_zero+0x40a/0x5d0 [ 2473.474062][T29163] ? __page_table_check_zero+0x40a/0x5d0 [ 2473.476163][T29163] free_unref_page_prepare+0x70f/0xcb0 [ 2473.478175][T29163] ? dec_usb_memory_use_count+0x204/0x400 [ 2473.480274][T29163] ? lock_downgrade+0x690/0x690 [ 2473.482087][T29163] free_unref_page+0x33/0x370 [ 2473.483933][T29163] hcd_buffer_free_pages+0xe8/0x180 [ 2473.485883][T29163] dec_usb_memory_use_count+0x27a/0x400 [ 2473.488221][T29163] ? mas_preallocate+0x163/0x360 [ 2473.490306][T29163] ? dec_usb_memory_use_count+0x400/0x400 [ 2473.492330][T29163] mmap_region+0x1ad4/0x28d0 [ 2473.493959][T29163] ? do_munmap+0xf0/0xf0 [ 2473.495650][T29163] ? security_mmap_addr+0x77/0xa0 [ 2473.497409][T29163] ? get_unmapped_area+0x1e8/0x3c0 [ 2473.499243][T29163] do_mmap+0x831/0xf60 [ 2473.500707][T29163] vm_mmap_pgoff+0x1a2/0x3b0 [ 2473.502448][T29163] ? randomize_page+0xb0/0xb0 [ 2473.504615][T29163] ksys_mmap_pgoff+0x41f/0x5a0 [ 2473.506300][T29163] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 2473.508188][T29163] __do_fast_syscall_32+0x65/0xf0 [ 2473.509942][T29163] do_fast_syscall_32+0x33/0x70 [ 2473.511648][T29163] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2473.513830][T29163] RIP: 0023:0xf7f51579 [ 2473.515393][T29163] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2473.522871][T29163] RSP: 002b:00000000f7f4c5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 2473.526296][T29163] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000001000 [ 2473.529674][T29163] RDX: 0000000000000007 RSI: 0000000000000012 RDI: 0000000000000003 [ 2473.532874][T29163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2473.535579][T29163] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2473.538330][T29163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2473.541117][T29163] [ 2473.542265][T29163] Modules linked in: [ 2473.543853][T29163] ---[ end trace 0000000000000000 ]--- [ 2473.545892][T29163] RIP: 0010:__page_table_check_zero+0x40a/0x5d0 [ 2473.548535][T29163] Code: 0f 84 f0 fc ff ff e8 e5 43 a2 ff 48 83 eb 01 48 89 dd e9 ea fc ff ff e8 d4 43 a2 ff 0f 0b e8 cd 43 a2 ff 0f 0b e8 c6 43 a2 ff <0f> 0b e8 bf 43 a2 ff 49 8b 6c 24 08 31 ff 48 89 eb 83 e3 01 48 89 [ 2473.555764][T29163] RSP: 0018:ffffc90029b47ac0 EFLAGS: 00010216 [ 2473.557972][T29163] RAX: 00000000000245bc RBX: 0000000000000001 RCX: ffffc90007352000 [ 2473.560869][T29163] RDX: 0000000000040000 RSI: ffffffff81e2031a RDI: 0000000000000005 [ 2473.564098][T29163] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2473.567767][T29163] R10: 0000000000000001 R11: 0000000000094001 R12: ffff888012838d00 [ 2473.571199][T29163] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 2473.574855][T29163] FS: 0000000000000000(0000) GS:ffff88802c600000(0063) knlGS:00000000f7f4cb40 [ 2473.578785][T29163] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2473.581645][T29163] CR2: 00000000f7ea55b6 CR3: 0000000000d11000 CR4: 0000000000350ef0 [ 2473.585233][T29163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2473.588794][T29163] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2473.592139][T29163] Kernel panic - not syncing: Fatal exception [ 2473.595200][T29163] Kernel Offset: disabled [ 2473.597145][T29163] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:32:03 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84882b65 RDI=ffffffff920c61c0 RBP=ffffffff920c6180 RSP=ffffc90029b47488 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=0000000000000030 R14=ffffffff84882b00 R15=0000000000000000 RIP=ffffffff84882b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7ea55b6 CR3=0000000000d11000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff8a109575 RDX=ffffed10058e6d9e RSI=0000000000000000 RDI=ffffffff81603207 RBP=dffffc0000000000 RSP=ffffc90000467e08 R8 =0000000000000000 R9 =ffff88802c736ceb R10=ffffed10058e6d9d R11=0000000000000000 R12=0000000000000001 R13=ffffffff8e7a8750 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8a10ad8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f4bfe4 CR3=00000000563e9000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000002 RBX=0000000000000002 RCX=ffffffff8a109575 RDX=ffffed1005906d9e RSI=0000000000000000 RDI=ffffffff81603207 RBP=dffffc0000000000 RSP=ffffc90000477e08 R8 =0000000000000000 R9 =ffff88802c836ceb R10=ffffed1005906d9d R11=0000000000000000 R12=0000000000000002 R13=ffffffff8e7a8750 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8a10ad8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f734e1b0 CR3=000000001e81b000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa1 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=dc31b10bd74b496c3cb2958b2c61193f XMM01=002330302f2330302f6273752f737562 XMM02=000000000000000041606e3000000000 XMM03=00000000000000000000000000000000 XMM04=30303030663778302826287366627375 XMM05=6e3d293030303178302f303030636666 XMM06=2c307830202c353030317830202c6c69 XMM07=0a29307830202c3072202c3231783020 XMM08=5d307830202c3078305b3d2930633030 XMM09=3130303030303030663778302826202c XMM10=30202c307830202c3078305b3d293030 XMM11=72202c327830202c5d307830202c3078 XMM12=0a297d62626262626262627830202c35 XMM13=2c30722859545245504f52505445535f XMM14=302826202c6162343634313063783020 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000003 RBX=0000000000000003 RCX=ffffffff8a109575 RDX=ffffed1005926d9e RSI=0000000000000000 RDI=ffffffff81603207 RBP=dffffc0000000000 RSP=ffffc90000487e08 R8 =0000000000000000 R9 =ffff88802c936ceb R10=ffffed1005926d9d R11=0000000000000000 R12=0000000000000003 R13=ffffffff8e7a8750 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8a10ad8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f734e1b0 CR3=0000000000d11000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000001 XMM01=00007ffe0e29c2f00000003000000010 XMM02=65656565656565656565656565656565 XMM03=00000000000000000000000000000000 XMM04=ff00ff00000000000000000000000000 XMM05=ffffffffffffffffffffffffffff0000 XMM06=ff00ff00000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000