openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x10) 14:35:25 executing program 4: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902d100030140f0d50904000000010100000a240184006302010209240402404738b0c50d240604055e040000000600030924050504e3d4ca030924030405030404030904010000010200000904010101010200000a2402010204a2402bf60a24020180428102a1160c24020102010103f76118090a24020105020107b4f5090501090004dc045e3306a28b44ff41852e34fb63d93f001f07250182bd200009040200000102000009040201010102000007240104ff0210072401f80302100b240201dd04083cd5bd4307240103070500d75a293a3960e88cdfc1dc70ba37a83864f010b2a48a7de12cd9731ef451b9cc3ebeddcef37d2a4d4d5977c49704da32e12a978f6aa465e1dd2e615265f63328214c22a06d536ace008d805595f0b3fbca5966ac9c036b0fa1e63aa3240d49d86d9a0632b55923fbe452cc56f2a054973dd7c5d51549d39808b9162ee22262d165e8674f00a55ad6419f1d2f0dba6d889b9164f5e1e6306b26321141b4612f92d256ee32f6b9669b0a9c7bcb"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) 14:35:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4000040) 14:35:25 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) 14:35:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, ["", "", "", ""]}, 0x1c}}, 0x4000040) [ 2520.125219][ T5092] usb 1-1: USB disconnect, device number 70 14:35:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:25 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) [ 2520.184723][T17851] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 2520.350271][ T5097] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 2520.426568][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:25 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:35:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}}, 0x4000040) 14:35:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x480) [ 2520.651317][T17851] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2520.661086][T17851] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2520.670669][T17851] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2520.687240][T17851] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2520.697182][T17851] usb 2-1: config 1 has no interface number 1 [ 2520.703605][T17851] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2520.714843][T17851] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2520.728316][T17851] usb 2-1: config 1 interface 2 has no altsetting 0 14:35:26 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:35:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, ["", ""]}, 0x1c}}, 0x4000040) [ 2520.840543][ T5097] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2520.850231][ T5097] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2520.859156][ T5097] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2520.869990][ T5097] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2520.885300][ T5097] usb 5-1: config 1 has no interface number 1 [ 2520.892302][ T5097] usb 5-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2520.903462][ T5097] usb 5-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2520.917108][ T5097] usb 5-1: config 1 interface 2 has no altsetting 0 [ 2521.030465][T17851] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2521.040653][T17851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.048931][T17851] usb 2-1: Product: 욒 [ 2521.053461][T17851] usb 2-1: Manufacturer: Р [ 2521.058205][T17851] usb 2-1: SerialNumber: syz [ 2521.180540][ T5097] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2521.196622][ T5097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.206236][ T5097] usb 5-1: Product: 욒 [ 2521.211857][ T5097] usb 5-1: Manufacturer: Р [ 2521.216619][ T5097] usb 5-1: SerialNumber: syz [ 2521.622787][T17851] usb 2-1: USB disconnect, device number 62 [ 2521.774270][ T5097] usb 5-1: USB disconnect, device number 92 [ 2521.856198][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2521.943400][T28796] udevd[28796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 14:35:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:27 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) r1 = socket(0x18, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5a}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2c820}, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:27 executing program 4: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) 14:35:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, [""]}, 0x1c}}, 0x4000040) 14:35:27 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:35:27 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) 14:35:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x4}, 0x1c}}, 0x4000040) 14:35:27 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) r1 = socket(0x18, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5a}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2c820}, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:27 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) 14:35:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x480) [ 2522.681574][T14189] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 2522.709897][ T5092] usb 2-1: new full-speed USB device number 63 using dummy_hcd 14:35:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x4}, 0x1c}}, 0x0) 14:35:28 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) r1 = socket(0x18, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5a}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2c820}, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:28 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x480) [ 2523.080882][T14189] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2523.090191][T14189] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2523.099140][T14189] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2523.109965][T14189] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2523.119191][T14189] usb 5-1: config 1 has no interface number 1 [ 2523.125855][T14189] usb 5-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2523.140250][T14189] usb 5-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2523.147998][ T5092] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2523.153991][T14189] usb 5-1: config 1 interface 2 has no altsetting 0 [ 2523.162593][ T5092] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2523.178361][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2523.188915][ T5092] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2523.198230][ T5092] usb 2-1: config 1 has no interface number 1 [ 2523.204760][ T5092] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2523.215941][ T5092] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2523.229401][ T5092] usb 2-1: config 1 interface 2 has no altsetting 0 [ 2523.417345][T14189] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2523.427259][T14189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2523.435717][T14189] usb 5-1: Product: 욒 [ 2523.443408][T14189] usb 5-1: Manufacturer: Р [ 2523.444785][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2523.448068][T14189] usb 5-1: SerialNumber: syz [ 2523.462456][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2523.470934][ T5092] usb 2-1: Product: 욒 [ 2523.475340][ T5092] usb 2-1: Manufacturer: Р [ 2523.480258][ T5092] usb 2-1: SerialNumber: syz [ 2523.952081][T14189] usb 5-1: USB disconnect, device number 93 [ 2524.105668][ T5092] usb 2-1: USB disconnect, device number 63 [ 2524.123177][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2524.270070][T28796] udevd[28796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 14:35:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x4}, 0x1c}}, 0x4000040) 14:35:29 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) r1 = socket(0x18, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:29 executing program 1: socket(0x23, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x80241) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000040)={0x9, 0xff, 0x81, 0x8}) 14:35:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x108, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/52, 0x34, 0x0, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/166, 0xa6, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x2, 0x37}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x26}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x3}, @register_looper, @request_death={0x400c630e, 0x2}], 0xff, 0x0, &(0x7f0000000540)="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"}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001014000026bd7000fbdbdf2508c8acb592db4745736c5a004f000500326b00004f0800000000"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x820) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000780)={0x38, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6b}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x1406, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x18}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) 14:35:29 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) r1 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:30 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x108, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/52, 0x34, 0x0, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/166, 0xa6, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x2, 0x37}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x26}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x3}, @register_looper, @request_death={0x400c630e, 0x2}], 0xff, 0x0, &(0x7f0000000540)="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"}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001014000026bd7000fbdbdf2508c8acb592db4745736c5a004f000500326b00004f0800000000"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x820) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000780)={0x38, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6b}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x1406, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x18}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) 14:35:30 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 14:35:30 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:30 executing program 1: socket(0x23, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x80241) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000040)={0x9, 0xff, 0x81, 0x8}) 14:35:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:30 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x108, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/52, 0x34, 0x0, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/166, 0xa6, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x2, 0x37}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x26}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x3}, @register_looper, @request_death={0x400c630e, 0x2}], 0xff, 0x0, &(0x7f0000000540)="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"}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001014000026bd7000fbdbdf2508c8acb592db4745736c5a004f000500326b00004f0800000000"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x820) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000780)={0x38, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6b}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x1406, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x18}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) 14:35:30 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 14:35:30 executing program 1: socket(0x23, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x80241) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000040)={0x9, 0xff, 0x81, 0x8}) 14:35:30 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:31 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x108, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/52, 0x34, 0x0, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/166, 0xa6, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x2, 0x37}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x26}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x3}, @register_looper, @request_death={0x400c630e, 0x2}], 0xff, 0x0, &(0x7f0000000540)="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"}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001014000026bd7000fbdbdf2508c8acb592db4745736c5a004f000500326b00004f0800000000"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x820) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000780)={0x38, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6b}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x1406, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x18}, 0x4000000) 14:35:31 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 14:35:31 executing program 1: socket(0x23, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x80241) 14:35:31 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_DEBUG={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:31 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:31 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x108, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/52, 0x34, 0x0, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/166, 0xa6, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x2, 0x37}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x26}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x3}, @register_looper, @request_death={0x400c630e, 0x2}], 0xff, 0x0, &(0x7f0000000540)="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"}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001014000026bd7000fbdbdf2508c8acb592db4745736c5a004f000500326b00004f0800000000"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x820) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000780)={0x38, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6b}) 14:35:31 executing program 1: syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x80241) 14:35:31 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) 14:35:31 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x400100, 0x0) r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:32 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:32 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x108, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/52, 0x34, 0x0, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/166, 0xa6, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x2, 0x37}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x26}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x3}, @register_looper, @request_death={0x400c630e, 0x2}], 0xff, 0x0, &(0x7f0000000540)="8f22b060280e561c95404a2c123edc1b7e00df6c83fae754f05356366ea28498699e4ab0a24e9977b6c6438436468aee5e912eb3cf4bfe7642e5190e1e3c62fa96e06f2c51e8a55a908f62f401e3a9893b0f044bd4c2f86e52c5bdd9671318cb6011c5ef4f43c823dc475af45d9dc00b87386e101e676dba9886ac4e82183db997a9c1126a771ae8d5c0226ca0eafdaa4bd5c46b13bcffac2913bd45637b99686bf5c1b9ba0bf3cae8572398169d8f3e2762f498e91c40f5fa74388aaadac505bb68640ced8c893f41b6b2d6026052d3e0b960a4bc25f828e4b1dc5ecc2e4eaaa66049df19e9839f2d681101c3a3b30fd7120b5de5122458549110e7e72985"}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001014000026bd7000fbdbdf2508c8acb592db4745736c5a004f000500326b00004f0800000000"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x820) 14:35:32 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) 14:35:32 executing program 1: syz_open_dev$hiddev(0x0, 0x9, 0x80241) 14:35:32 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:32 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:32 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) 14:35:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:32 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x108, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/52, 0x34, 0x0, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/166, 0xa6, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x2, 0x37}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x26}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x3}, @register_looper, @request_death={0x400c630e, 0x2}], 0xff, 0x0, &(0x7f0000000540)="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"}) 14:35:32 executing program 1: syz_open_dev$hiddev(0x0, 0x9, 0x80241) 14:35:32 executing program 0: r0 = socket(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:32 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x6, 0x0) 14:35:32 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:33 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) 14:35:33 executing program 1: syz_open_dev$hiddev(0x0, 0x9, 0x80241) 14:35:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x480) 14:35:33 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) socket(0x10, 0x6, 0x0) 14:35:33 executing program 0: r0 = socket(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:33 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) 14:35:33 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:33 executing program 1: syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x80241) 14:35:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x480) 14:35:33 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) socket(0x10, 0x6, 0x0) 14:35:33 executing program 4: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 14:35:34 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:34 executing program 1: syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) 14:35:34 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket(0x10, 0x6, 0x0) 14:35:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 14:35:34 executing program 0: r0 = socket(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:34 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:34 executing program 5: socket(0x10, 0x6, 0x0) 14:35:34 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1406, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:34 executing program 4: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 14:35:34 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 14:35:34 executing program 5: socket(0x0, 0x6, 0x0) 14:35:35 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 14:35:35 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:35:35 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:35 executing program 4: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 14:35:35 executing program 0: socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:35 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 14:35:35 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:35 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:35:35 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={0x0, 0x0, 0x18}, 0x18) 14:35:35 executing program 0: socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:35 executing program 5: socket(0x0, 0x6, 0x0) 14:35:35 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) 14:35:35 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={0x0}, 0x18) 14:35:35 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:36 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:35:36 executing program 0: socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:36 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) 14:35:36 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:36 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={0x0}, 0x18) 14:35:36 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) 14:35:36 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) 14:35:36 executing program 5: socket(0x0, 0x6, 0x0) 14:35:36 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:36 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) socket(0x10, 0x6, 0x0) 14:35:36 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={0x0}, 0x18) 14:35:36 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) 14:35:37 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:35:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:37 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:37 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:37 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) 14:35:37 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:37 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 14:35:37 executing program 5: socket(0x10, 0x0, 0x0) 14:35:37 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:35:37 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:37 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000c14080026bd7000fedb88d4be06030001000000080001000000000008000100020000000800030003000000080001000000000008000100010000000800010000000200"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:38 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:38 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:38 executing program 5: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) 14:35:38 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:38 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:35:38 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 14:35:38 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000091) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:38 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:38 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:38 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 14:35:38 executing program 5: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) 14:35:38 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:38 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:35:38 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14:35:39 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 14:35:39 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 14:35:39 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:39 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) 14:35:39 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) [ 2533.973603][T14189] usb 6-1: new full-speed USB device number 63 using dummy_hcd 14:35:39 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 14:35:39 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) 14:35:39 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) [ 2534.401172][T14189] usb 6-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2534.410715][T14189] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2534.420474][T14189] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2534.430955][T14189] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2534.440386][T14189] usb 6-1: config 1 has no interface number 1 [ 2534.446728][T14189] usb 6-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2534.457957][T14189] usb 6-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2534.471635][T14189] usb 6-1: config 1 interface 2 has no altsetting 0 [ 2534.721388][T14189] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2534.730866][T14189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.739123][T14189] usb 6-1: Product: 욒 [ 2534.743812][T14189] usb 6-1: Manufacturer: Р [ 2534.748569][T14189] usb 6-1: SerialNumber: syz [ 2535.252302][T14189] usb 6-1: USB disconnect, device number 63 [ 2535.363279][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:40 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) 14:35:40 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:35:40 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) 14:35:40 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 14:35:40 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:40 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:35:41 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) 14:35:41 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 14:35:41 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:41 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:41 executing program 5: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) 14:35:41 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 14:35:41 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) 14:35:41 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 14:35:41 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:41 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:41 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) [ 2536.489940][T14189] usb 6-1: new full-speed USB device number 64 using dummy_hcd 14:35:42 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 14:35:42 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 14:35:42 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x4040010) 14:35:42 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) [ 2536.881010][T14189] usb 6-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2536.890535][T14189] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2536.899742][T14189] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2536.910274][T14189] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2536.919521][T14189] usb 6-1: config 1 has no interface number 1 14:35:42 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) [ 2536.925955][T14189] usb 6-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2536.937106][T14189] usb 6-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2536.950536][T14189] usb 6-1: config 1 interface 2 has no altsetting 0 [ 2537.153406][T14189] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2537.165915][T14189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2537.174698][T14189] usb 6-1: Product: 욒 [ 2537.179114][T14189] usb 6-1: Manufacturer: Р [ 2537.184275][T14189] usb 6-1: SerialNumber: syz [ 2537.789312][T14189] usb 6-1: USB disconnect, device number 64 [ 2537.889317][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:43 executing program 5: socket(0x23, 0x0, 0x0) r0 = socket(0x15, 0x80000, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) 14:35:43 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:43 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) 14:35:43 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x4040010) 14:35:43 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x0, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:43 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 14:35:43 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:43 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x4040010) 14:35:43 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x1, 0x0, 0x0, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:43 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14:35:43 executing program 5: socket(0x23, 0x0, 0x0) r0 = socket(0x15, 0x80000, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) 14:35:43 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) 14:35:44 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:44 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:44 executing program 5: socket(0x23, 0x0, 0x0) r0 = socket(0x15, 0x80000, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) 14:35:44 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x18, 0x1}) 14:35:44 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:35:44 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) socket$nl_route(0x10, 0x3, 0x0) 14:35:44 executing program 0: ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:44 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040010) 14:35:44 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14:35:44 executing program 5: socket(0x23, 0x0, 0x0) socket(0x15, 0x80000, 0x1) 14:35:44 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) 14:35:44 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:35:45 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040010) 14:35:45 executing program 0: ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:45 executing program 5: socket(0x15, 0x80000, 0x1) 14:35:45 executing program 1: socket$nl_route(0x10, 0x3, 0x0) 14:35:45 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) 14:35:45 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:35:45 executing program 0: ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:45 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040010) 14:35:45 executing program 5: socket(0x0, 0x80000, 0x1) 14:35:45 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) socket(0x9, 0xa, 0xffff8001) 14:35:45 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 14:35:45 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:35:45 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:46 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4040010) 14:35:46 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) 14:35:46 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x12c, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}, @exit_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0x45, 0x0, &(0x7f0000000280)="b81fc918ad63d909dbb5961f172da239192bfce03d6e1d65aef67cd12882da6593f25ba6ffe8c6121749bb2f4314305ba4624ea018bf0004804a63ce975c0ac9ec48b217d4"}) [ 2540.858680][ T5092] usb 2-1: new full-speed USB device number 64 using dummy_hcd 14:35:46 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:46 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4040010) 14:35:46 executing program 5: socket(0x0, 0x80000, 0x1) 14:35:46 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) [ 2541.283504][ T5092] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2541.292882][ T5092] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2541.302060][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2541.312594][ T5092] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2541.321948][ T5092] usb 2-1: config 1 has no interface number 1 14:35:46 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4040010) [ 2541.328286][ T5092] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2541.339522][ T5092] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2541.353101][ T5092] usb 2-1: config 1 interface 2 has no altsetting 0 [ 2541.569443][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2541.579256][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2541.587731][ T5092] usb 2-1: Product: 욒 [ 2541.592923][ T5092] usb 2-1: Manufacturer: Р [ 2541.597665][ T5092] usb 2-1: SerialNumber: syz [ 2542.099998][ T5092] usb 2-1: USB disconnect, device number 64 [ 2542.186501][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:47 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) socket(0x9, 0xa, 0xffff8001) 14:35:47 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:47 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000880)) 14:35:47 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) 14:35:47 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:47 executing program 5: socket(0x0, 0x80000, 0x1) 14:35:48 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:48 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 14:35:48 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) [ 2543.009029][ T5092] usb 2-1: new full-speed USB device number 65 using dummy_hcd 14:35:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) 14:35:48 executing program 5: socket(0x15, 0x0, 0x1) [ 2543.390643][ T5092] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2543.400574][ T5092] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2543.417612][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2543.428150][ T5092] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2543.437654][ T5092] usb 2-1: config 1 has no interface number 1 [ 2543.444182][ T5092] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2543.455492][ T5092] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2543.469088][ T5092] usb 2-1: config 1 interface 2 has no altsetting 0 [ 2543.640298][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2543.649962][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2543.658219][ T5092] usb 2-1: Product: 욒 [ 2543.662851][ T5092] usb 2-1: Manufacturer: Р [ 2543.667607][ T5092] usb 2-1: SerialNumber: syz [ 2544.144233][ T5092] usb 2-1: USB disconnect, device number 65 [ 2544.237587][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:49 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902d100030140f0d50904000000010100000a240184006302010209240402404738b0c50d240604055e040000000600030924050504e3d4ca030924030405030404030904010000010200000904010101010200000a2402010204a2402bf60a24020180428102a1160c24020102010103f76118090a24020105020107b4f5090501090004dc045e3306a28b44ff41852e34fb63d93f001f07250182bd200009040200000102000009040201010102000007240104ff0210072401f80302100b240201dd04083cd5bd4307240103070500d75a293a3960e88cdfc1dc70ba37a83864f010b2a48a7de12cd9731ef451b9cc3ebeddcef37d2a4d4d5977c49704da32e12a978f6aa465e1dd2e615265f63328214c22a06d536ace008d805595f0b3fbca5966ac9c036b0fa1e63aa3240d49d86d9a0632b55923fbe452cc56f2a054973dd7c5d51549d39808b9162ee22262d165e8674f00a55ad6419f1d2f0dba6d889b9164f5e1e6306b26321141b4612f92d256ee32f6b9669b0a9c7bcb"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) socket(0x9, 0xa, 0xffff8001) 14:35:49 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:49 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) 14:35:49 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:49 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000004c0)) 14:35:49 executing program 5: socket(0x15, 0x0, 0x0) 14:35:50 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000880)) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) 14:35:50 executing program 4: openat$drirender128(0xffffffffffffff9c, 0x0, 0x20002, 0x0) 14:35:50 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x0, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:50 executing program 5: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) socket(0x9, 0xa, 0xffff8001) 14:35:50 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x100000001, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) [ 2545.060089][ T5092] usb 2-1: new full-speed USB device number 66 using dummy_hcd 14:35:50 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) [ 2545.450697][ T5092] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2545.466424][ T5092] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2545.476145][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2545.486792][ T5092] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2545.496161][ T5092] usb 2-1: config 1 has no interface number 1 [ 2545.502607][ T5092] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2545.513858][ T5092] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2545.527338][ T5092] usb 2-1: config 1 interface 2 has no altsetting 0 [ 2545.544327][T17851] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 2545.725865][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2545.735462][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2545.744022][ T5092] usb 2-1: Product: 욒 [ 2545.748430][ T5092] usb 2-1: Manufacturer: Р [ 2545.753226][ T5092] usb 2-1: SerialNumber: syz [ 2545.930142][T17851] usb 6-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2545.939473][T17851] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2545.948605][T17851] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2545.959095][T17851] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2545.974994][T17851] usb 6-1: config 1 has no interface number 1 [ 2545.982221][T17851] usb 6-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2545.993472][T17851] usb 6-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2546.007100][T17851] usb 6-1: config 1 interface 2 has no altsetting 0 [ 2546.190534][T17851] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2546.200138][T17851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2546.208381][T17851] usb 6-1: Product: 욒 [ 2546.212965][T17851] usb 6-1: Manufacturer: Р [ 2546.217716][T17851] usb 6-1: SerialNumber: syz [ 2546.321779][ T5092] usb 2-1: USB disconnect, device number 66 [ 2546.437597][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:52 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) socket(0x9, 0xa, 0xffff8001) 14:35:52 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}}, 0x4040010) 14:35:52 executing program 4: openat$drirender128(0xffffffffffffff9c, 0x0, 0x20002, 0x0) 14:35:52 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 14:35:52 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) 14:35:52 executing program 3: openat$drirender128(0xffffffffffffff9c, 0x0, 0x20002, 0x0) [ 2547.024196][T17851] usb 6-1: USB disconnect, device number 65 14:35:52 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x18}}, 0x4040010) 14:35:52 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 14:35:52 executing program 4: openat$drirender128(0xffffffffffffff9c, 0x0, 0x20002, 0x0) 14:35:52 executing program 5: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) socket(0x9, 0xa, 0xffff8001) [ 2547.319523][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2547.330356][ T5097] usb 2-1: new full-speed USB device number 67 using dummy_hcd 14:35:52 executing program 3: openat$drirender128(0xffffffffffffff9c, 0x0, 0x20002, 0x0) 14:35:52 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x18}}, 0x4040010) [ 2547.813946][ T5097] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2547.823313][ T5097] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2547.832407][ T5097] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2547.842803][ T5097] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2547.852209][ T5097] usb 2-1: config 1 has no interface number 1 [ 2547.858529][ T5097] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2547.869787][ T5097] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2547.883410][ T5097] usb 2-1: config 1 interface 2 has no altsetting 0 [ 2547.970096][T17851] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 2548.070261][ T5097] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2548.079711][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2548.087905][ T5097] usb 2-1: Product: 욒 [ 2548.092567][ T5097] usb 2-1: Manufacturer: Р [ 2548.097289][ T5097] usb 2-1: SerialNumber: syz [ 2548.340224][T17851] usb 6-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2548.349518][T17851] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2548.358817][T17851] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2548.369506][T17851] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2548.369800][T17851] usb 6-1: config 1 has no interface number 1 [ 2548.369929][T17851] usb 6-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2548.370115][T17851] usb 6-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2548.370287][T17851] usb 6-1: config 1 interface 2 has no altsetting 0 [ 2548.550487][T17851] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2548.560048][T17851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2548.568289][T17851] usb 6-1: Product: 욒 [ 2548.572888][T17851] usb 6-1: Manufacturer: Р [ 2548.577645][T17851] usb 6-1: SerialNumber: syz [ 2548.701047][ T5097] usb 2-1: USB disconnect, device number 67 [ 2548.828472][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:54 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) socket(0x9, 0xa, 0xffff8001) 14:35:54 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x18}}, 0x4040010) 14:35:54 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 14:35:54 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 14:35:54 executing program 3: openat$drirender128(0xffffffffffffff9c, 0x0, 0x20002, 0x0) [ 2549.131929][T17851] usb 6-1: USB disconnect, device number 66 14:35:54 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x0, 0x80000000, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) 14:35:54 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 14:35:54 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x20}}, 0x4040010) 14:35:54 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) [ 2549.547666][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:55 executing program 5: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) socket(0x9, 0xa, 0xffff8001) 14:35:55 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x4b, 0x0, 0x0, 0x0, "9a0044946ec82780b3359de1b977b22b1fc8ed959d836deb0768ea4968e559ab9b17a44c8a04c02028881c58f2594dcd1f51a9"}) [ 2549.840996][ T5097] usb 2-1: new full-speed USB device number 68 using dummy_hcd 14:35:55 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) [ 2550.249920][T17851] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 2550.262644][ T5097] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2550.277464][ T5097] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2550.287402][ T5097] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2550.298242][ T5097] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2550.307575][ T5097] usb 2-1: config 1 has no interface number 1 [ 2550.314292][ T5097] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2550.325560][ T5097] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2550.338945][ T5097] usb 2-1: config 1 interface 2 has no altsetting 0 [ 2550.500660][ T5097] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2550.510300][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2550.518643][ T5097] usb 2-1: Product: 욒 [ 2550.523169][ T5097] usb 2-1: Manufacturer: Р [ 2550.527850][ T5097] usb 2-1: SerialNumber: syz [ 2550.701215][T17851] usb 6-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2550.710502][T17851] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2550.719406][T17851] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2550.730076][T17851] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2550.739299][T17851] usb 6-1: config 1 has no interface number 1 [ 2550.745787][T17851] usb 6-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2550.756911][T17851] usb 6-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2550.770501][T17851] usb 6-1: config 1 interface 2 has no altsetting 0 [ 2550.942825][T17851] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2550.952325][T17851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2550.960799][T17851] usb 6-1: Product: 욒 [ 2550.965205][T17851] usb 6-1: Manufacturer: Р [ 2550.970066][T17851] usb 6-1: SerialNumber: syz [ 2551.018268][ T5097] usb 2-1: USB disconnect, device number 68 [ 2551.118455][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:56 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) socket(0x9, 0xa, 0xffff8001) 14:35:56 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x18}}, 0x4040010) 14:35:56 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x18}) 14:35:56 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 14:35:56 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) [ 2551.534378][T17851] usb 6-1: USB disconnect, device number 67 14:35:57 executing program 3: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) socket(0x9, 0xa, 0xffff8001) 14:35:57 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x18}}, 0x4040010) [ 2551.854086][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:57 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) socket(0x2c, 0x4, 0x63f) 14:35:57 executing program 0: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) socket(0x9, 0xa, 0xffff8001) 14:35:57 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) socket(0x23, 0x0, 0x0) [ 2552.101147][ T5092] usb 2-1: new full-speed USB device number 69 using dummy_hcd 14:35:57 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) socket(0x2c, 0x4, 0x63f) 14:35:57 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x18}}, 0x4040010) [ 2552.464928][T14189] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 2552.561378][ T5092] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2552.571134][ T5092] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2552.580241][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2552.590694][ T5092] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2552.600238][ T5092] usb 2-1: config 1 has no interface number 1 [ 2552.606583][ T5092] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2552.618005][ T5092] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2552.627225][T17083] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 2552.637852][ T5092] usb 2-1: config 1 interface 2 has no altsetting 0 [ 2552.810374][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2552.820052][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2552.834467][ T5092] usb 2-1: Product: 욒 [ 2552.838878][ T5092] usb 2-1: Manufacturer: Р [ 2552.844333][ T5092] usb 2-1: SerialNumber: syz [ 2552.850697][T14189] usb 4-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2552.859945][T14189] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2552.868854][T14189] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2552.879354][T14189] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2552.888667][T14189] usb 4-1: config 1 has no interface number 1 [ 2552.895095][T14189] usb 4-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2552.906280][T14189] usb 4-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2552.919950][T14189] usb 4-1: config 1 interface 2 has no altsetting 0 [ 2553.110649][T17083] usb 1-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2553.119905][T17083] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2553.128851][T17083] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2553.142769][T17083] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2553.152529][T17083] usb 1-1: config 1 has no interface number 1 [ 2553.158877][T17083] usb 1-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2553.170437][T17083] usb 1-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2553.184010][T17083] usb 1-1: config 1 interface 2 has no altsetting 0 [ 2553.191757][T14189] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2553.201266][T14189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2553.209958][T14189] usb 4-1: Product: 욒 [ 2553.210065][T14189] usb 4-1: Manufacturer: Р [ 2553.210169][T14189] usb 4-1: SerialNumber: syz [ 2553.408392][T17083] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2553.418196][T17083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2553.426737][T17083] usb 1-1: Product: 욒 [ 2553.431402][T17083] usb 1-1: Manufacturer: Р [ 2553.436151][T17083] usb 1-1: SerialNumber: syz [ 2553.515594][ T5092] usb 2-1: USB disconnect, device number 69 [ 2553.672907][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2553.762969][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2553.769812][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 2553.877385][T14189] usb 4-1: USB disconnect, device number 81 14:35:59 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) socket(0x23, 0x0, 0x0) 14:35:59 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x20}}, 0x4040010) 14:35:59 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) socket(0x2c, 0x4, 0x63f) 14:35:59 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) socket(0x23, 0x0, 0x0) [ 2554.141168][T17083] usb 1-1: USB disconnect, device number 71 14:35:59 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) socket(0x23, 0x0, 0x0) 14:35:59 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x20}}, 0x0) 14:35:59 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) socket(0x2c, 0x4, 0x63f) [ 2554.446555][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:35:59 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) socket(0x23, 0x0, 0x0) [ 2554.539309][T28796] udevd[28796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 14:36:00 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x2, 0xf9b6, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x0, 0xc, "49be6f5382b8c424d121"}, {0x6, 0x2}, {0x2, 0x9, "3e8c0542c0ffe5"}, {0x0, 0xf, "f1e2f3638796d67006c254e5af"}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x2d}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x8}, {@local, 0x101}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xa, [{@private=0xa010101, 0x4040000}, {@empty, 0x6}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x9, [{@local, 0x7fff}, {@multicast1, 0x1}, {@local, 0x4}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x26, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x7, [0x4, 0x6, 0x6, 0x6, 0x4]}, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 14:36:00 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) r2 = socket(0x9, 0xa, 0xffff8001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) 14:36:00 executing program 4: socket(0x2c, 0x4, 0x63f) 14:36:00 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x2, 0xf9b6, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x0, 0xc, "49be6f5382b8c424d121"}, {0x6, 0x2}, {0x2, 0x9, "3e8c0542c0ffe5"}, {0x0, 0xf, "f1e2f3638796d67006c254e5af"}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x2d}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x8}, {@local, 0x101}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xa, [{@private=0xa010101, 0x4040000}, {@empty, 0x6}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x9, [{@local, 0x7fff}, {@multicast1, 0x1}, {@local, 0x4}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x26, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x7, [0x4, 0x6, 0x6, 0x6, 0x4]}, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 14:36:00 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) socket(0x23, 0x0, 0x0) 14:36:00 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) 14:36:00 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x2, 0xf9b6, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x0, 0xc, "49be6f5382b8c424d121"}, {0x6, 0x2}, {0x2, 0x9, "3e8c0542c0ffe5"}, {0x0, 0xf, "f1e2f3638796d67006c254e5af"}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x2d}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x8}, {@local, 0x101}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xa, [{@private=0xa010101, 0x4040000}, {@empty, 0x6}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x9, [{@local, 0x7fff}, {@multicast1, 0x1}, {@local, 0x4}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x26, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x7, [0x4, 0x6, 0x6, 0x6, 0x4]}, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 14:36:00 executing program 4: socket(0x0, 0x4, 0x63f) [ 2555.320890][ T5092] usb 2-1: new full-speed USB device number 70 using dummy_hcd 14:36:00 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) socket(0x23, 0x0, 0x0) 14:36:00 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x2, 0xf9b6, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x0, 0xc, "49be6f5382b8c424d121"}, {0x6, 0x2}, {0x2, 0x9, "3e8c0542c0ffe5"}, {0x0, 0xf, "f1e2f3638796d67006c254e5af"}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x2d}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x8}, {@local, 0x101}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xa, [{@private=0xa010101, 0x4040000}, {@empty, 0x6}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x9, [{@local, 0x7fff}, {@multicast1, 0x1}, {@local, 0x4}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x26, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x7, [0x4, 0x6, 0x6, 0x6, 0x4]}, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 14:36:00 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) [ 2555.711125][ T5092] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2555.720677][ T5092] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2555.729891][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2555.740420][ T5092] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2555.749983][ T5092] usb 2-1: config 1 has no interface number 1 [ 2555.756349][ T5092] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2555.767670][ T5092] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2555.781263][ T5092] usb 2-1: config 1 interface 2 has no altsetting 0 14:36:01 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x2, 0xf9b6, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x0, 0xc, "49be6f5382b8c424d121"}, {0x6, 0x2}, {0x2, 0x9, "3e8c0542c0ffe5"}, {0x0, 0xf, "f1e2f3638796d67006c254e5af"}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x2d}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x8}, {@local, 0x101}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xa, [{@private=0xa010101, 0x4040000}, {@empty, 0x6}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x9, [{@local, 0x7fff}, {@multicast1, 0x1}, {@local, 0x4}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x26, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x7, [0x4, 0x6, 0x6, 0x6, 0x4]}, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) [ 2555.981532][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2555.991341][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2556.006333][ T5092] usb 2-1: Product: 욒 [ 2556.011944][ T5092] usb 2-1: Manufacturer: Р [ 2556.016712][ T5092] usb 2-1: SerialNumber: syz 14:36:01 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, r2}) [ 2556.594994][ T5092] usb 2-1: USB disconnect, device number 70 [ 2556.700855][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:36:02 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x2, 0xf9b6, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x0, 0xc, "49be6f5382b8c424d121"}, {0x6, 0x2}, {0x2, 0x9, "3e8c0542c0ffe5"}, {0x0, 0xf, "f1e2f3638796d67006c254e5af"}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x2d}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x8}, {@local, 0x101}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xa, [{@private=0xa010101, 0x4040000}, {@empty, 0x6}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x9, [{@local, 0x7fff}, {@multicast1, 0x1}, {@local, 0x4}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x26, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x7, [0x4, 0x6, 0x6, 0x6, 0x4]}, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 14:36:02 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r2}) 14:36:02 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x2, 0xf9b6, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x0, 0xc, "49be6f5382b8c424d121"}, {0x6, 0x2}, {0x2, 0x9, "3e8c0542c0ffe5"}, {0x0, 0xf, "f1e2f3638796d67006c254e5af"}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x2d}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x8}, {@local, 0x101}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xa, [{@private=0xa010101, 0x4040000}, {@empty, 0x6}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x9, [{@local, 0x7fff}, {@multicast1, 0x1}, {@local, 0x4}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x26, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x7, [0x4, 0x6, 0x6, 0x6, 0x4]}, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 14:36:02 executing program 4: socket(0x0, 0x4, 0x63f) 14:36:02 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:36:02 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, r2}) 14:36:02 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) getpgid(0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) 14:36:02 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, r2}) 14:36:02 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:36:02 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x2, 0xf9b6, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x0, 0xc, "49be6f5382b8c424d121"}, {0x6, 0x2}, {0x2, 0x9, "3e8c0542c0ffe5"}, {0x0, 0xf, "f1e2f3638796d67006c254e5af"}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x2d}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x8}, {@local, 0x101}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xa, [{@private=0xa010101, 0x4040000}, {@empty, 0x6}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x9, [{@local, 0x7fff}, {@multicast1, 0x1}, {@local, 0x4}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x26, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x7, [0x4, 0x6, 0x6, 0x6, 0x4]}, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 14:36:03 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:36:03 executing program 4: socket(0x0, 0x4, 0x63f) 14:36:03 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) getpgid(0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) 14:36:03 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r2}) 14:36:03 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) 14:36:03 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:36:03 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x2, 0xf9b6, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x0, 0xc, "49be6f5382b8c424d121"}, {0x6, 0x2}, {0x2, 0x9, "3e8c0542c0ffe5"}, {0x0, 0xf, "f1e2f3638796d67006c254e5af"}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x2d}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x8}, {@local, 0x101}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xa, [{@private=0xa010101, 0x4040000}, {@empty, 0x6}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x9, [{@local, 0x7fff}, {@multicast1, 0x1}, {@local, 0x4}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x26, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x7, [0x4, 0x6, 0x6, 0x6, 0x4]}, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 14:36:03 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) getpgid(0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) 14:36:03 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) getpgid(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r2}) 14:36:03 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:03 executing program 4: socket(0x2c, 0x0, 0x63f) 14:36:04 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) 14:36:04 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:36:04 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) getpgid(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) 14:36:04 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r2}) 14:36:04 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) 14:36:04 executing program 4: socket(0x2c, 0x0, 0x0) 14:36:04 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:04 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) 14:36:04 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) getpgid(0xffffffffffffffff) 14:36:04 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0xd45c2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1409, 0x8, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x815}, 0x20000000) 14:36:04 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) 14:36:04 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) 14:36:05 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:05 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x20000080) 14:36:05 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0xd45c2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1409, 0x8, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x815}, 0x20000000) 14:36:05 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x8, '\x00', 0x0, r1, 0x7430, 0x5, 0x3}, 0x48) getpgid(0xffffffffffffffff) 14:36:05 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:05 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:05 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) 14:36:05 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0xd45c2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1409, 0x8, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x815}, 0x20000000) 14:36:05 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:05 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) getpgid(0xffffffffffffffff) 14:36:05 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:05 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:06 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) 14:36:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0xd45c2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) 14:36:06 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) getpgid(0xffffffffffffffff) 14:36:06 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:06 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0xd45c2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 14:36:06 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) getpgid(0xffffffffffffffff) 14:36:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) 14:36:06 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) 14:36:06 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0xd45c2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) 14:36:06 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:06 executing program 3: getpgid(0xffffffffffffffff) 14:36:07 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:07 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38}) 14:36:07 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:07 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0xd45c2, 0x0) 14:36:07 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) 14:36:07 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:07 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) 14:36:07 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) 14:36:07 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0xd45c2, 0x0) 14:36:07 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:07 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000580)={0x8, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:07 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:08 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:36:08 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x38}) 14:36:08 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 14:36:08 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:08 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:08 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) 14:36:08 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:08 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) 14:36:08 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:36:08 executing program 5: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:08 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 14:36:09 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:09 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:09 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) 14:36:09 executing program 5: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:09 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:36:09 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) 14:36:09 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:09 executing program 5: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) 14:36:09 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:09 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:09 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:09 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) 14:36:10 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r2, 0x0, r2, r2, 0x0, r2, r2], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:10 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) 14:36:10 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 14:36:10 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:10 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:10 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r2, 0x0, r2, r2, 0x0, r2, r2], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:10 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) 14:36:10 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:10 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:10 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:10 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r2, 0x0, r2, r2, 0x0, r2, r2], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:10 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) 14:36:11 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) 14:36:11 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:11 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:11 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:11 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:11 executing program 5: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:11 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) 14:36:11 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:11 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:11 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 14:36:11 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:12 executing program 5: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) 14:36:12 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 14:36:12 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:12 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000340)={r3}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r3, 0x0, r3, r3, 0x0, r3, r3], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:12 executing program 4: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) socket(0x9, 0xa, 0xffff8001) 14:36:12 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:12 executing program 5: r0 = socket(0x23, 0x0, 0x0) socketpair(0x9, 0x6, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x2, 0xb, @empty, @local, 0x700, 0x7800, 0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) 14:36:12 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:12 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) 14:36:12 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r2, 0x0, r2, r2, 0x0, r2, r2], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) [ 2567.590388][ T5097] usb 5-1: new full-speed USB device number 94 using dummy_hcd 14:36:13 executing program 5: r0 = socket(0x23, 0x0, 0x0) socketpair(0x9, 0x6, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x2, 0xb, @empty, @local, 0x700, 0x7800, 0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) 14:36:13 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:13 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:13 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:36:13 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r1}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[r2, 0x0, r2, r2, 0x0, r2, r2], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) [ 2567.961367][ T5097] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2567.970854][ T5097] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2567.986935][ T5097] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2567.997997][ T5097] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 14:36:13 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) [ 2568.007396][ T5097] usb 5-1: config 1 has no interface number 1 [ 2568.013966][ T5097] usb 5-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2568.025212][ T5097] usb 5-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2568.038873][ T5097] usb 5-1: config 1 interface 2 has no altsetting 0 [ 2568.281272][ T5097] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2568.297213][ T5097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2568.306251][ T5097] usb 5-1: Product: 욒 [ 2568.310761][ T5097] usb 5-1: Manufacturer: Р [ 2568.315534][ T5097] usb 5-1: SerialNumber: syz [ 2568.838289][ T5097] usb 5-1: USB disconnect, device number 94 [ 2568.942046][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:36:14 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000040}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, [""]}, 0x34}}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1404, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000054) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x1409, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) r1 = socket(0x23, 0x4, 0x7) connect$caif(r1, &(0x7f0000000440)=@dgm={0x25, 0x10000, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000005c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5c}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}}, 0x4000005) connect$caif(0xffffffffffffffff, &(0x7f0000000800)=@util={0x25, "25ae61679be40d9457088513dfc765ab"}, 0x18) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x10) 14:36:14 executing program 5: r0 = socket(0x23, 0x0, 0x0) socketpair(0x9, 0x6, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x2, 0xb, @empty, @local, 0x700, 0x7800, 0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) 14:36:14 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 14:36:14 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:14 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400140, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:14 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:14 executing program 5: r0 = socket(0x23, 0x0, 0x0) socketpair(0x9, 0x6, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x2, 0xb, @empty, @local, 0x700, 0x7800, 0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) 14:36:14 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:14 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 14:36:15 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:15 executing program 4: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) r2 = socket(0x9, 0xa, 0xffff8001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) socket$nl_rdma(0x10, 0x3, 0x14) 14:36:15 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 14:36:15 executing program 5: r0 = socket(0x23, 0x0, 0x0) socketpair(0x9, 0x6, 0x800, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x2, 0xb, @empty, @local, 0x700, 0x7800, 0x0, 0x9}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000300)) 14:36:15 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:15 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:15 executing program 5: r0 = socket(0x23, 0x0, 0x0) socketpair(0x9, 0x6, 0x800, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x2, 0xb, @empty, @local, 0x700, 0x7800, 0x0, 0x9}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) 14:36:15 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) [ 2570.419919][T17851] usb 5-1: new full-speed USB device number 95 using dummy_hcd 14:36:15 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:16 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:16 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:16 executing program 5: socket(0x23, 0x0, 0x0) socketpair(0x9, 0x6, 0x800, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) [ 2570.790768][T17851] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2570.800067][T17851] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2570.809012][T17851] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2570.819800][T17851] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2570.829040][T17851] usb 5-1: config 1 has no interface number 1 [ 2570.835568][T17851] usb 5-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2570.846799][T17851] usb 5-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2570.866777][T17851] usb 5-1: config 1 interface 2 has no altsetting 0 [ 2571.050566][T17851] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2571.066703][T17851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.075669][T17851] usb 5-1: Product: 욒 [ 2571.080173][T17851] usb 5-1: Manufacturer: Р [ 2571.084978][T17851] usb 5-1: SerialNumber: syz [ 2571.619997][T17851] usb 5-1: USB disconnect, device number 95 [ 2571.717894][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:36:17 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:17 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:17 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:17 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:17 executing program 5: socket(0x23, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) 14:36:17 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:17 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) 14:36:17 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:17 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:17 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:17 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:17 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:18 executing program 5: openat$sndseq(0xffffffffffffff9c, 0x0, 0x4000) 14:36:18 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:18 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:18 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:18 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:18 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:18 executing program 5: openat$sndseq(0xffffffffffffff9c, 0x0, 0x4000) 14:36:18 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:18 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:18 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:18 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:18 executing program 5: openat$sndseq(0xffffffffffffff9c, 0x0, 0x4000) 14:36:18 executing program 4: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) r2 = socket(0x9, 0xa, 0xffff8001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) 14:36:18 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x1, 0x0, 0x8, 0x404, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:19 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:19 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) 14:36:19 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) [ 2573.951462][ T5090] usb 5-1: new full-speed USB device number 96 using dummy_hcd 14:36:19 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:36:19 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:19 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:19 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) 14:36:19 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) [ 2574.381942][ T5090] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2574.391312][ T5090] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2574.400736][ T5090] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2574.411294][ T5090] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2574.420718][ T5090] usb 5-1: config 1 has no interface number 1 14:36:19 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 2574.427155][ T5090] usb 5-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2574.441585][ T5090] usb 5-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2574.455546][ T5090] usb 5-1: config 1 interface 2 has no altsetting 0 [ 2574.631436][ T5090] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2574.644490][ T5090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2574.653257][ T5090] usb 5-1: Product: 욒 [ 2574.657654][ T5090] usb 5-1: Manufacturer: Р [ 2574.662580][ T5090] usb 5-1: SerialNumber: syz [ 2575.210301][ T5090] usb 5-1: USB disconnect, device number 96 [ 2575.303096][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:36:20 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:20 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:20 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:20 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:36:20 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:20 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) 14:36:21 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x1, 0x0, 0x8, 0x404, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:21 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:21 executing program 4: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) r2 = socket(0x9, 0xa, 0xffff8001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) 14:36:21 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:21 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x58, 0x8, 0x2}) 14:36:21 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:21 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x8, 0x404, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:21 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:21 executing program 5: socket(0x3, 0x2, 0x0) [ 2576.591864][ T5090] usb 5-1: new full-speed USB device number 97 using dummy_hcd 14:36:22 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:22 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:22 executing program 5: socket(0x3, 0x2, 0x0) [ 2577.010353][ T5090] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2577.019534][ T5090] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2577.028737][ T5090] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2577.028851][ T5090] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2577.028991][ T5090] usb 5-1: config 1 has no interface number 1 [ 2577.029105][ T5090] usb 5-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2577.029256][ T5090] usb 5-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2577.029414][ T5090] usb 5-1: config 1 interface 2 has no altsetting 0 [ 2577.290849][ T5090] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2577.303544][ T5090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2577.312342][ T5090] usb 5-1: Product: 욒 [ 2577.316753][ T5090] usb 5-1: Manufacturer: Р [ 2577.321646][ T5090] usb 5-1: SerialNumber: syz [ 2577.795172][ T5090] usb 5-1: USB disconnect, device number 97 [ 2577.887966][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:36:23 executing program 4: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902d100030140f0d50904000000010100000a240184006302010209240402404738b0c50d240604055e040000000600030924050504e3d4ca030924030405030404030904010000010200000904010101010200000a2402010204a2402bf60a24020180428102a1160c24020102010103f76118090a24020105020107b4f5090501090004dc045e3306a28b44ff41852e34fb63d93f001f07250182bd200009040200000102000009040201010102000007240104ff0210072401f80302100b240201dd04083cd5bd4307240103070500d75a293a3960e88cdfc1dc70ba37a83864f010b2a48a7de12cd9731ef451b9cc3ebeddcef37d2a4d4d5977c49704da32e12a978f6aa465e1dd2e615265f63328214c22a06d536ace008d805595f0b3fbca5966ac9c036b0fa1e63aa3240d49d86d9a0632b55923fbe452cc56f2a054973dd7c5d51549d39808b9162ee22262d165e8674f00a55ad6419f1d2f0dba6d889b9164f5e1e6306b26321141b4612f92d256ee32f6b9669b0a9c7bcb"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) r2 = socket(0x9, 0xa, 0xffff8001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) socket$nl_rdma(0x10, 0x3, 0x14) 14:36:23 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:23 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:23 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cpu.max\x00', 0x2, 0x0) 14:36:23 executing program 5: socket(0x3, 0x2, 0x0) 14:36:23 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) 14:36:23 executing program 5: socket(0x0, 0x2, 0x0) 14:36:23 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:23 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) [ 2578.760376][ T5090] usb 5-1: new full-speed USB device number 98 using dummy_hcd 14:36:24 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) [ 2579.181830][ T5090] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2579.191174][ T5090] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2579.200490][ T5090] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2579.210916][ T5090] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2579.220271][ T5090] usb 5-1: config 1 has no interface number 1 [ 2579.226637][ T5090] usb 5-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2579.237923][ T5090] usb 5-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2579.254707][ T5090] usb 5-1: config 1 interface 2 has no altsetting 0 [ 2579.420384][ T5090] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2579.430007][ T5090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.438248][ T5090] usb 5-1: Product: 욒 [ 2579.442740][ T5090] usb 5-1: Manufacturer: Р [ 2579.447491][ T5090] usb 5-1: SerialNumber: syz [ 2579.910290][ T5090] usb 5-1: USB disconnect, device number 98 [ 2580.017593][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:36:25 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 14:36:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:25 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:25 executing program 5: socket(0x0, 0x2, 0x0) 14:36:25 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) 14:36:25 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x40054) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) r3 = syz_open_dev$hiddev(&(0x7f0000000200), 0x5, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000240)={0x4, 0xb3, 0x1, 0x428}) 14:36:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) 14:36:26 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:26 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x40054) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) r3 = syz_open_dev$hiddev(&(0x7f0000000200), 0x5, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000240)={0x4, 0xb3, 0x1, 0x428}) 14:36:26 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 14:36:26 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x40054) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) r3 = syz_open_dev$hiddev(&(0x7f0000000200), 0x5, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000240)={0x4, 0xb3, 0x1, 0x428}) 14:36:26 executing program 5: socket(0x0, 0x2, 0x0) 14:36:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x48) 14:36:26 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 14:36:26 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:26 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x40054) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) r3 = syz_open_dev$hiddev(&(0x7f0000000200), 0x5, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000240)={0x4, 0xb3, 0x1, 0x428}) 14:36:26 executing program 4: socket(0x6, 0x80000, 0x8) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) connect$caif(r0, &(0x7f0000000000)=@rfm={0x25, 0x7, "54f0de7ec4a9deed2cfee26b88805991"}, 0x18) 14:36:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:26 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x40054) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) r3 = syz_open_dev$hiddev(&(0x7f0000000200), 0x5, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000240)={0x4, 0xb3, 0x1, 0x428}) 14:36:27 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:27 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x0, 0x3}) 14:36:27 executing program 5: socket(0x3, 0x0, 0x0) 14:36:27 executing program 4: socket(0x6, 0x80000, 0x8) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) connect$caif(r0, &(0x7f0000000000)=@rfm={0x25, 0x7, "54f0de7ec4a9deed2cfee26b88805991"}, 0x18) 14:36:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:27 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 14:36:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x40054) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) syz_open_dev$hiddev(&(0x7f0000000200), 0x5, 0x0) 14:36:27 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x7, 0x3}) 14:36:27 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}) 14:36:27 executing program 4: socket(0x6, 0x80000, 0x8) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) connect$caif(r0, &(0x7f0000000000)=@rfm={0x25, 0x7, "54f0de7ec4a9deed2cfee26b88805991"}, 0x18) 14:36:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:27 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 14:36:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x40054) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:28 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0}) 14:36:28 executing program 4: socket(0x6, 0x80000, 0x8) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) 14:36:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:28 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 14:36:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:28 executing program 4: socket(0x6, 0x80000, 0x8) socket$pppoe(0x18, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 14:36:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:28 executing program 0: socket(0x23, 0x6, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="063a0a8de3691ac5e0b4cdb139b483cc8c6b5d6c328f220b524c15bc4df2733294d686887197c852c133f16b8255f5a865160252eacb1da29c7b44d353251cac4990a065e66754abe2df8a8d7da54f44f09a4836847a9907d6a68bc971ac68202c9ff986002ab17e4a84e4431464610ac265eef826ac81983dd8dad5c59286297bbaa61f42789c4af8c41353dcead128a73616277998c299852f79bfa5e5e6acb40cf0d4f9aebddd", 0xa8}, {&(0x7f00000000c0)="d101b9c177b6d79b4fb46cda61dd84bc18f4f8b6a08c8d7da4a603b8bc8404b7db8abb2c76b7e6ca85404c83146de9f8c1ee22795e657f1d50e00f379f13b888230f4b025fc50407db040e29414e2aff08b72df459ffd2136bbb8dbada70ab90c53e7698caa5160a1518fc1d87f3fe61c9b23649445823fd201716735ec0a88e5a4c5f14903b9aecb5cb8dbc0b5fb0269e21388b521707a29e8938a297593386208c902b27bccc6b9df05bcdbd6be8eb7c98a936d0ffaeb917674c17f22e9c0705c6bf4e8f42d375b0e758", 0xcb}], 0x2, 0x0, 0x0, 0x20000800}, 0x40840) 14:36:28 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000040}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, [""]}, 0x34}}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1404, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000054) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x1409, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) r1 = socket(0x23, 0x4, 0x7) connect$caif(r1, &(0x7f0000000440)=@dgm={0x25, 0x10000, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5c}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}}, 0x4000005) connect$caif(0xffffffffffffffff, &(0x7f0000000800)=@util={0x25, "25ae61679be40d9457088513dfc765ab"}, 0x18) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1410, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4440040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) 14:36:28 executing program 4: socket(0x6, 0x80000, 0x8) socket$pppoe(0x18, 0x1, 0x0) 14:36:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:28 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[0x80000000, 0x2, 0x8000], 0x0, 0x0, 0x3}) 14:36:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:28 executing program 0: socket(0x23, 0x6, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="063a0a8de3691ac5e0b4cdb139b483cc8c6b5d6c328f220b524c15bc4df2733294d686887197c852c133f16b8255f5a865160252eacb1da29c7b44d353251cac4990a065e66754abe2df8a8d7da54f44f09a4836847a9907d6a68bc971ac68202c9ff986002ab17e4a84e4431464610ac265eef826ac81983dd8dad5c59286297bbaa61f42789c4af8c41353dcead128a73616277998c299852f79bfa5e5e6acb40cf0d4f9aebddd", 0xa8}, {&(0x7f00000000c0)="d101b9c177b6d79b4fb46cda61dd84bc18f4f8b6a08c8d7da4a603b8bc8404b7db8abb2c76b7e6ca85404c83146de9f8c1ee22795e657f1d50e00f379f13b888230f4b025fc50407db040e29414e2aff08b72df459ffd2136bbb8dbada70ab90c53e7698caa5160a1518fc1d87f3fe61c9b23649445823fd201716735ec0a88e5a4c5f14903b9aecb5cb8dbc0b5fb0269e21388b521707a29e8938a297593386208c902b27bccc6b9df05bcdbd6be8eb7c98a936d0ffaeb917674c17f22e9c0705c6bf4e8f42d375b0e758", 0xcb}], 0x2, 0x0, 0x0, 0x20000800}, 0x40840) 14:36:29 executing program 4: socket(0x6, 0x80000, 0x8) 14:36:29 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000040}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, [""]}, 0x34}}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1404, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000054) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x1409, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) r1 = socket(0x23, 0x4, 0x7) connect$caif(r1, &(0x7f0000000440)=@dgm={0x25, 0x10000, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5c}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}}, 0x4000005) connect$caif(0xffffffffffffffff, &(0x7f0000000800)=@util={0x25, "25ae61679be40d9457088513dfc765ab"}, 0x18) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1410, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4440040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x10) 14:36:29 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:36:29 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}) 14:36:29 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:29 executing program 4: socket(0x0, 0x80000, 0x8) 14:36:29 executing program 0: socket(0x23, 0x6, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="063a0a8de3691ac5e0b4cdb139b483cc8c6b5d6c328f220b524c15bc4df2733294d686887197c852c133f16b8255f5a865160252eacb1da29c7b44d353251cac4990a065e66754abe2df8a8d7da54f44f09a4836847a9907d6a68bc971ac68202c9ff986002ab17e4a84e4431464610ac265eef826ac81983dd8dad5c59286297bbaa61f42789c4af8c41353dcead128a73616277998c299852f79bfa5e5e6acb40cf0d4f9aebddd", 0xa8}, {&(0x7f00000000c0)="d101b9c177b6d79b4fb46cda61dd84bc18f4f8b6a08c8d7da4a603b8bc8404b7db8abb2c76b7e6ca85404c83146de9f8c1ee22795e657f1d50e00f379f13b888230f4b025fc50407db040e29414e2aff08b72df459ffd2136bbb8dbada70ab90c53e7698caa5160a1518fc1d87f3fe61c9b23649445823fd201716735ec0a88e5a4c5f14903b9aecb5cb8dbc0b5fb0269e21388b521707a29e8938a297593386208c902b27bccc6b9df05bcdbd6be8eb7c98a936d0ffaeb917674c17f22e9c0705c6bf4e8f42d375b0e758", 0xcb}], 0x2, 0x0, 0x0, 0x20000800}, 0x40840) 14:36:29 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:36:29 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:29 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902d100030140f0d50904000000010100000a240184006302010209240402404738b0c50d240604055e040000000600030924050504e3d4ca030924030405030404030904010000010200000904010101010200000a2402010204a2402bf60a24020180428102a1160c24020102010103f76118090a24020105020107b4f5090501090004dc045e3306a28b44ff41852e34fb63d93f001f07250182bd200009040200000102000009040201010102000007240104ff0210072401f80302100b240201dd04083cd5bd4307240103070500d75a293a3960e88cdfc1dc70ba37a83864f010b2a48a7de12cd9731ef451b9cc3ebeddcef37d2a4d4d5977c49704da32e12a978f6aa465e1dd2e615265f63328214c22a06d536ace008d805595f0b3fbca5966ac9c036b0fa1e63aa3240d49d86d9a0632b55923fbe452cc56f2a054973dd7c5d51549d39808b9162ee22262d165e8674f00a55ad6419f1d2f0dba6d889b9164f5e1e6306b26321141b4612f92d256ee32f6b9669b0a9c7bcb"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) r2 = socket(0x9, 0xa, 0xffff8001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, 0x140f, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8019) 14:36:29 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0}) 14:36:30 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:36:30 executing program 0: socket(0x23, 0x6, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:36:30 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000013c0)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) [ 2584.805032][T17851] usb 2-1: new full-speed USB device number 71 using dummy_hcd 14:36:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480), 0x48) 14:36:30 executing program 3: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) r2 = socket(0x9, 0xa, 0xffff8001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, 0x140f, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8019) 14:36:30 executing program 4: socket(0x0, 0x80000, 0x8) 14:36:30 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:36:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480), 0x48) 14:36:30 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2b5136b3675e4bbd, 0x0, [0x6, 0x5, 0x3, 0x5387, 0x3376, 0xd2b9, 0x8, 0x5, 0x1, 0x2, 0xc004, 0x2, 0x2, 0x9, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) [ 2585.271690][T17851] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2585.280974][T17851] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2585.296649][T17851] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2585.307716][T17851] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2585.317056][T17851] usb 2-1: config 1 has no interface number 1 [ 2585.323501][T17851] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2585.334837][T17851] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2585.348415][T17851] usb 2-1: config 1 interface 2 has no altsetting 0 14:36:30 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000040}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, [""]}, 0x34}}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1404, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000054) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x1409, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) r1 = socket(0x23, 0x4, 0x7) connect$caif(r1, &(0x7f0000000440)=@dgm={0x25, 0x10000, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5c}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}}, 0x4000005) connect$caif(0xffffffffffffffff, &(0x7f0000000800)=@util={0x25, "25ae61679be40d9457088513dfc765ab"}, 0x18) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1410, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4440040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x140b, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080880}, 0x40840) [ 2585.500159][ T5090] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 2585.590584][T17851] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2585.606424][T17851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2585.615481][T17851] usb 2-1: Product: 욒 [ 2585.619969][T17851] usb 2-1: Manufacturer: Р [ 2585.624710][T17851] usb 2-1: SerialNumber: syz [ 2585.904152][ T5090] usb 4-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2585.913636][ T5090] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2585.922822][ T5090] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2585.933459][ T5090] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2585.942963][ T5090] usb 4-1: config 1 has no interface number 1 [ 2585.943100][ T5090] usb 4-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2585.943268][ T5090] usb 4-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2585.943455][ T5090] usb 4-1: config 1 interface 2 has no altsetting 0 [ 2586.120751][ T5090] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2586.130389][ T5090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.138638][ T5090] usb 4-1: Product: 욒 [ 2586.143184][ T5090] usb 4-1: Manufacturer: Р [ 2586.147942][ T5090] usb 4-1: SerialNumber: syz [ 2586.275574][T17851] usb 2-1: USB disconnect, device number 71 [ 2586.388304][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:36:32 executing program 1: syz_usb_connect$uac1(0x2, 0xe3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x1, 0x8, 0x40, 0x1e}, 0x60, &(0x7f0000000380)={0x5, 0xf, 0x131, 0x6, [@generic={0xcd, 0x10, 0xa, "d347a86dd0e8746cceb89229c7bf47a7b845795867f0e88cbd0a43389118507932855b98c4e1e42ea36c231c8f127613fc0e64e52e4e3df628c00e177597c8b11a4adc219437a28655106531ccbd7d9d63df4cf26f8ad0e7ee0109e91eade5a2adb19ae8f0e97ddc6c3f7db7653dd8984ba4452203b07929a15176d5a7aa4a9ce2887ee3bb89a792311c4301d48ed685b730f44980b074e990ba64673abb9a557926bccfd70603372416d2a41676810605d95a66de2589dfa6812dac218a8c9e5997d2cb8a6c86524274"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7fff, 0x11000, 0x3}, @generic={0x22, 0x10, 0xa, "703d31b52cfb7ec8eb1b3e49362a7dac61a31bd08c591db46e728b4bba24f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x2, 0xff0f, 0x4, [0x0, 0x3f00, 0xff00f0, 0xff3f]}, @generic={0xa, 0x10, 0xa, "045f1532154a29"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3, 0x97, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x93652c230abcc692}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8001, "64dba60664138e99bd053a3e6ca479cc420929f3d104f07bc0a6e7c72119b724"}) r2 = socket(0x9, 0xa, 0xffff8001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x48, 0x1411, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x24028000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, 0x140f, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8019) 14:36:32 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480), 0x48) 14:36:32 executing program 4: socket(0x0, 0x80000, 0x8) 14:36:32 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000040}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, [""]}, 0x34}}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1404, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000054) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x1409, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) r1 = socket(0x23, 0x4, 0x7) connect$caif(r1, &(0x7f0000000440)=@dgm={0x25, 0x10000, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5c}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}}, 0x4000005) connect$caif(0xffffffffffffffff, &(0x7f0000000800)=@util={0x25, "25ae61679be40d9457088513dfc765ab"}, 0x18) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1410, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4440040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x140b, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080880}, 0x40840) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) r6 = socket(0x2b, 0x80000, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000ec0)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, @in6={0xa, 0x4e24, 0x80000000, @loopback, 0xfffffffd}, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}], 0x74) [ 2586.701590][ T5090] usb 4-1: USB disconnect, device number 82 14:36:32 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000040}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, [""]}, 0x34}}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1404, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000054) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x1409, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) r1 = socket(0x23, 0x4, 0x7) connect$caif(r1, &(0x7f0000000440)=@dgm={0x25, 0x10000, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5c}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}}, 0x4000005) connect$caif(0xffffffffffffffff, &(0x7f0000000800)=@util={0x25, "25ae61679be40d9457088513dfc765ab"}, 0x18) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1410, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4440040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x140b, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080880}, 0x40840) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) r6 = socket(0x2b, 0x80000, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000ec0)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, @in6={0xa, 0x4e24, 0x80000000, @loopback, 0xfffffffd}, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}], 0x74) [ 2587.159351][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:36:32 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:32 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000040}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, [""]}, 0x34}}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1404, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000054) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x1409, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) r1 = socket(0x23, 0x4, 0x7) connect$caif(r1, &(0x7f0000000440)=@dgm={0x25, 0x10000, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5c}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}}, 0x4000005) connect$caif(0xffffffffffffffff, &(0x7f0000000800)=@util={0x25, "25ae61679be40d9457088513dfc765ab"}, 0x18) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1410, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4440040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x140b, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080880}, 0x40840) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) r6 = socket(0x2b, 0x80000, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000ec0)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, @in6={0xa, 0x4e24, 0x80000000, @loopback, 0xfffffffd}, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}], 0x74) 14:36:32 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) [ 2587.271649][T17083] usb 2-1: new full-speed USB device number 72 using dummy_hcd 14:36:32 executing program 4: socket(0x6, 0x0, 0x8) 14:36:33 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x200000000000000) [ 2587.660689][T17083] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 2587.670356][T17083] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2587.679290][T17083] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2587.689826][T17083] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2587.699117][T17083] usb 2-1: config 1 has no interface number 1 14:36:33 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000040}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, [""]}, 0x34}}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1404, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000054) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x1409, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) r1 = socket(0x23, 0x4, 0x7) connect$caif(r1, &(0x7f0000000440)=@dgm={0x25, 0x10000, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5c}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}}, 0x4000005) connect$caif(0xffffffffffffffff, &(0x7f0000000800)=@util={0x25, "25ae61679be40d9457088513dfc765ab"}, 0x18) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1410, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4440040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x140b, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080880}, 0x40840) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) r6 = socket(0x2b, 0x80000, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000ec0)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, @in6={0xa, 0x4e24, 0x80000000, @loopback, 0xfffffffd}, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}], 0x74) [ 2587.705583][T17083] usb 2-1: too many endpoints for config 1 interface 2 altsetting 64: 71, using maximum allowed: 30 [ 2587.717218][T17083] usb 2-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 2587.730759][T17083] usb 2-1: config 1 interface 2 has no altsetting 0 [ 2587.930492][T17083] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2587.940338][T17083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2587.952218][T17083] usb 2-1: Product: 욒 [ 2587.956588][T17083] usb 2-1: Manufacturer: Р [ 2587.962189][T17083] usb 2-1: SerialNumber: syz [ 2588.478634][T17083] usb 2-1: USB disconnect, device number 72 [ 2588.570237][T28780] udevd[28780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:36:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) (fail_nth: 1) 14:36:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) (fail_nth: 1) 14:36:34 executing program 4: socket(0x6, 0x0, 0x0) 14:36:34 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1) 14:36:34 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0}) (fail_nth: 1) [ 2588.996575][T30441] FAULT_INJECTION: forcing a failure. [ 2588.996575][T30441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2589.010584][T30441] CPU: 0 PID: 30441 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2589.020942][T30441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2589.031229][T30441] Call Trace: [ 2589.034724][T30441] [ 2589.037831][T30441] dump_stack_lvl+0x1bf/0x240 [ 2589.042805][T30441] dump_stack+0x1e/0x20 [ 2589.047275][T30441] should_fail_ex+0x748/0x7f0 [ 2589.052303][T30441] should_fail+0x2a/0x30 [ 2589.056856][T30441] should_fail_usercopy+0x2e/0x40 [ 2589.062215][T30441] _copy_from_user+0x33/0x160 [ 2589.067236][T30441] __sys_bpf+0x2dc/0xd60 [ 2589.071836][T30441] __x64_sys_bpf+0xa0/0xe0 [ 2589.076528][T30441] do_syscall_64+0x44/0x110 [ 2589.081311][T30441] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2589.087495][T30441] RIP: 0033:0x7f374fc7cae9 [ 2589.092165][T30441] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2589.112087][T30441] RSP: 002b:00007f3750a490c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2589.120793][T30441] RAX: ffffffffffffffda RBX: 00007f374fd9bf80 RCX: 00007f374fc7cae9 [ 2589.128974][T30441] RDX: 0000000000000048 RSI: 0000000020000480 RDI: 0000000000000000 [ 2589.137161][T30441] RBP: 00007f3750a49120 R08: 0000000000000000 R09: 0000000000000000 [ 2589.145392][T30441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2589.153601][T30441] R13: 000000000000000b R14: 00007f374fd9bf80 R15: 00007f374febfa48 [ 2589.161822][T30441] [ 2589.174472][T30442] FAULT_INJECTION: forcing a failure. [ 2589.174472][T30442] name failslab, interval 1, probability 0, space 0, times 0 14:36:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) [ 2589.191021][T30442] CPU: 0 PID: 30442 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2589.201403][T30442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2589.211696][T30442] Call Trace: [ 2589.215165][T30442] [ 2589.218290][T30442] dump_stack_lvl+0x1bf/0x240 [ 2589.223295][T30442] dump_stack+0x1e/0x20 [ 2589.227728][T30442] should_fail_ex+0x748/0x7f0 [ 2589.232746][T30442] __should_failslab+0x188/0x1f0 [ 2589.237994][T30442] should_failslab+0x2d/0x70 [ 2589.242858][T30442] __kmem_cache_alloc_node+0xc6/0x970 [ 2589.248482][T30442] ? tomoyo_realpath_from_path+0x104/0xa90 [ 2589.254527][T30442] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2589.260625][T30442] ? kstrtoull+0xbf/0x3a0 [ 2589.265208][T30442] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2589.271315][T30442] __kmalloc+0x121/0x3c0 [ 2589.275789][T30442] ? tomoyo_realpath_from_path+0x104/0xa90 [ 2589.281959][T30442] tomoyo_realpath_from_path+0x104/0xa90 [ 2589.287883][T30442] ? __srcu_read_lock+0x76/0xd0 [ 2589.292984][T30442] tomoyo_path_number_perm+0x1d9/0x8e0 [ 2589.298771][T30442] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2589.304908][T30442] tomoyo_file_ioctl+0x42/0x50 [ 2589.309921][T30442] ? tomoyo_inode_getattr+0x40/0x40 [ 2589.315373][T30442] security_file_ioctl+0xa1/0x150 [ 2589.320704][T30442] __se_sys_ioctl+0xcc/0x410 [ 2589.325584][T30442] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2589.331680][T30442] __x64_sys_ioctl+0x96/0xe0 [ 2589.336550][T30442] do_syscall_64+0x44/0x110 [ 2589.341307][T30442] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2589.347454][T30442] RIP: 0033:0x7fca2447cae9 [ 2589.352079][T30442] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2589.371938][T30442] RSP: 002b:00007fca251150c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2589.380690][T30442] RAX: ffffffffffffffda RBX: 00007fca2459bf80 RCX: 00007fca2447cae9 [ 2589.388868][T30442] RDX: 0000000020000440 RSI: 00000000c02864ca RDI: 0000000000000003 [ 2589.397028][T30442] RBP: 00007fca25115120 R08: 0000000000000000 R09: 0000000000000000 [ 2589.405284][T30442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2589.413442][T30442] R13: 000000000000000b R14: 00007fca2459bf80 R15: 00007fca246bfa48 [ 2589.421622][T30442] [ 2589.425286][T30442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2589.456746][T30444] FAULT_INJECTION: forcing a failure. [ 2589.456746][T30444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2589.470338][T30444] CPU: 1 PID: 30444 Comm: syz-executor.5 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2589.480669][T30444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2589.490964][T30444] Call Trace: [ 2589.494388][T30444] [ 2589.497477][T30444] dump_stack_lvl+0x1bf/0x240 [ 2589.502406][T30444] dump_stack+0x1e/0x20 [ 2589.506801][T30444] should_fail_ex+0x748/0x7f0 [ 2589.511755][T30444] should_fail+0x2a/0x30 [ 2589.516249][T30444] should_fail_usercopy+0x2e/0x40 [ 2589.521550][T30444] _copy_to_user+0x33/0x100 [ 2589.526320][T30444] simple_read_from_buffer+0x199/0x340 [ 2589.532029][T30444] proc_fail_nth_read+0x1e8/0x2c0 [ 2589.537321][T30444] ? proc_fault_inject_write+0x490/0x490 [ 2589.543214][T30444] vfs_read+0x367/0xe00 [ 2589.547653][T30444] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2589.554182][T30444] ksys_read+0x20f/0x4c0 [ 2589.558673][T30444] __x64_sys_read+0x93/0xd0 [ 2589.563405][T30444] do_syscall_64+0x44/0x110 [ 2589.568134][T30444] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2589.574281][T30444] RIP: 0033:0x7f8e9fc7b78c [ 2589.578894][T30444] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2589.598769][T30444] RSP: 002b:00007f8ea09310c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2589.607466][T30444] RAX: ffffffffffffffda RBX: 00007f8e9fd9bf80 RCX: 00007f8e9fc7b78c [ 2589.615745][T30444] RDX: 000000000000000f RSI: 00007f8ea0931130 RDI: 0000000000000003 [ 2589.623921][T30444] RBP: 00007f8ea0931120 R08: 0000000000000000 R09: 0000000000000000 [ 2589.632082][T30444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2589.640237][T30444] R13: 000000000000000b R14: 00007f8e9fd9bf80 R15: 00007f8e9febfa48 [ 2589.648416][T30444] [ 2589.661059][T30446] FAULT_INJECTION: forcing a failure. [ 2589.661059][T30446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2589.675409][T30446] CPU: 1 PID: 30446 Comm: syz-executor.1 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2589.685784][T30446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2589.696085][T30446] Call Trace: [ 2589.699557][T30446] [ 2589.702719][T30446] dump_stack_lvl+0x1bf/0x240 [ 2589.707739][T30446] dump_stack+0x1e/0x20 [ 2589.712232][T30446] should_fail_ex+0x748/0x7f0 [ 2589.717184][T30446] should_fail+0x2a/0x30 [ 2589.721704][T30446] should_fail_usercopy+0x2e/0x40 [ 2589.727017][T30446] _copy_from_user+0x33/0x160 [ 2589.731969][T30446] __sys_bpf+0x2dc/0xd60 [ 2589.736475][T30446] __x64_sys_bpf+0xa0/0xe0 [ 2589.741109][T30446] do_syscall_64+0x44/0x110 [ 2589.745846][T30446] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2589.751979][T30446] RIP: 0033:0x7fd67e67cae9 [ 2589.756584][T30446] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2589.776618][T30446] RSP: 002b:00007fd67f3770c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2589.785283][T30446] RAX: ffffffffffffffda RBX: 00007fd67e79bf80 RCX: 00007fd67e67cae9 [ 2589.793471][T30446] RDX: 0000000000000048 RSI: 0000000020000480 RDI: 0000000000000000 [ 2589.801711][T30446] RBP: 00007fd67f377120 R08: 0000000000000000 R09: 0000000000000000 [ 2589.809905][T30446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2589.818067][T30446] R13: 000000000000000b R14: 00007fd67e79bf80 R15: 00007fd67e8bfa48 [ 2589.826245][T30446] 14:36:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) (fail_nth: 2) 14:36:35 executing program 4: socket(0x6, 0x0, 0x0) (fail_nth: 1) 14:36:35 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0}) (fail_nth: 2) 14:36:35 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:36:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) (fail_nth: 2) [ 2590.162808][T30451] FAULT_INJECTION: forcing a failure. [ 2590.162808][T30451] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.176191][T30451] CPU: 0 PID: 30451 Comm: syz-executor.4 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2590.186555][T30451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2590.196834][T30451] Call Trace: [ 2590.200269][T30451] [ 2590.203389][T30451] dump_stack_lvl+0x1bf/0x240 [ 2590.208431][T30451] dump_stack+0x1e/0x20 [ 2590.212797][T30451] should_fail_ex+0x748/0x7f0 [ 2590.217864][T30451] __should_failslab+0x188/0x1f0 [ 2590.223069][T30451] should_failslab+0x2d/0x70 [ 2590.227890][T30451] slab_pre_alloc_hook+0xa7/0x880 [ 2590.233152][T30451] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2590.239226][T30451] kmem_cache_alloc_lru+0xc7/0x970 [ 2590.244580][T30451] ? sock_alloc_inode+0x62/0x150 [ 2590.249826][T30451] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2590.255923][T30451] sock_alloc_inode+0x62/0x150 [ 2590.260937][T30451] ? sockfs_init_fs_context+0x140/0x140 [ 2590.266787][T30451] alloc_inode+0x83/0x440 [ 2590.271383][T30451] new_inode_pseudo+0x35/0x100 [ 2590.276413][T30451] __sock_create+0x22e/0xd60 [ 2590.281283][T30451] __sys_socket+0x144/0x670 [ 2590.286037][T30451] __x64_sys_socket+0x8e/0xe0 [ 2590.290966][T30451] do_syscall_64+0x44/0x110 [ 2590.295724][T30451] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2590.301887][T30451] RIP: 0033:0x7fe4d267cae9 [ 2590.306517][T30451] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2590.326409][T30451] RSP: 002b:00007fe4d33f40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2590.335093][T30451] RAX: ffffffffffffffda RBX: 00007fe4d279bf80 RCX: 00007fe4d267cae9 [ 2590.343288][T30451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2590.351458][T30451] RBP: 00007fe4d33f4120 R08: 0000000000000000 R09: 0000000000000000 [ 2590.359648][T30451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2590.367831][T30451] R13: 000000000000000b R14: 00007fe4d279bf80 R15: 00007fe4d28bfa48 [ 2590.376034][T30451] [ 2590.383914][T30451] socket: no more sockets [ 2590.384789][T30452] FAULT_INJECTION: forcing a failure. [ 2590.384789][T30452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2590.402535][T30452] CPU: 1 PID: 30452 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2590.412917][T30452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2590.417730][T30455] FAULT_INJECTION: forcing a failure. [ 2590.417730][T30455] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.423114][T30452] Call Trace: [ 2590.423166][T30452] [ 2590.423212][T30452] dump_stack_lvl+0x1bf/0x240 [ 2590.423375][T30452] dump_stack+0x1e/0x20 [ 2590.451523][T30452] should_fail_ex+0x748/0x7f0 [ 2590.456609][T30452] should_fail+0x2a/0x30 [ 2590.461119][T30452] should_fail_usercopy+0x2e/0x40 [ 2590.466402][T30452] _copy_to_user+0x33/0x100 [ 2590.471169][T30452] simple_read_from_buffer+0x199/0x340 [ 2590.476890][T30452] proc_fail_nth_read+0x1e8/0x2c0 [ 2590.482194][T30452] ? proc_fault_inject_write+0x490/0x490 [ 2590.488099][T30452] vfs_read+0x367/0xe00 [ 2590.492534][T30452] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2590.499064][T30452] ksys_read+0x20f/0x4c0 [ 2590.503542][T30452] __x64_sys_read+0x93/0xd0 [ 2590.508301][T30452] do_syscall_64+0x44/0x110 [ 2590.513082][T30452] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2590.519214][T30452] RIP: 0033:0x7f374fc7b78c [ 2590.523843][T30452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2590.543715][T30452] RSP: 002b:00007f3750a490c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2590.552379][T30452] RAX: ffffffffffffffda RBX: 00007f374fd9bf80 RCX: 00007f374fc7b78c [ 2590.560642][T30452] RDX: 000000000000000f RSI: 00007f3750a49130 RDI: 0000000000000003 [ 2590.568816][T30452] RBP: 00007f3750a49120 R08: 0000000000000000 R09: 0000000000000000 [ 2590.577006][T30452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2590.585168][T30452] R13: 000000000000000b R14: 00007f374fd9bf80 R15: 00007f374febfa48 [ 2590.593371][T30452] [ 2590.596567][T30455] CPU: 0 PID: 30455 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2590.606925][T30455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2590.617230][T30455] Call Trace: [ 2590.620676][T30455] [ 2590.623800][T30455] dump_stack_lvl+0x1bf/0x240 [ 2590.628741][T30455] dump_stack+0x1e/0x20 [ 2590.633142][T30455] should_fail_ex+0x748/0x7f0 [ 2590.638150][T30455] __should_failslab+0x188/0x1f0 [ 2590.643584][T30455] should_failslab+0x2d/0x70 [ 2590.648463][T30455] __kmem_cache_alloc_node+0xc6/0x970 [ 2590.654120][T30455] ? tomoyo_encode+0x5f8/0xa40 [ 2590.659155][T30455] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2590.665313][T30455] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2590.671474][T30455] __kmalloc+0x121/0x3c0 [ 2590.675994][T30455] ? tomoyo_encode+0x5f8/0xa40 [ 2590.681054][T30455] tomoyo_encode+0x5f8/0xa40 [ 2590.685945][T30455] tomoyo_realpath_from_path+0x9d8/0xa90 [ 2590.691898][T30455] tomoyo_path_number_perm+0x1d9/0x8e0 [ 2590.697774][T30455] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2590.704193][T30455] tomoyo_file_ioctl+0x42/0x50 [ 2590.709226][T30455] ? tomoyo_inode_getattr+0x40/0x40 [ 2590.714737][T30455] security_file_ioctl+0xa1/0x150 [ 2590.720115][T30455] __se_sys_ioctl+0xcc/0x410 [ 2590.725055][T30455] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2590.731214][T30455] __x64_sys_ioctl+0x96/0xe0 [ 2590.736163][T30455] do_syscall_64+0x44/0x110 [ 2590.740959][T30455] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2590.747161][T30455] RIP: 0033:0x7fca2447cae9 [ 2590.751831][T30455] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2590.771751][T30455] RSP: 002b:00007fca251150c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2590.780451][T30455] RAX: ffffffffffffffda RBX: 00007fca2459bf80 RCX: 00007fca2447cae9 [ 2590.788648][T30455] RDX: 0000000020000440 RSI: 00000000c02864ca RDI: 0000000000000003 [ 2590.796826][T30455] RBP: 00007fca25115120 R08: 0000000000000000 R09: 0000000000000000 [ 2590.805007][T30455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:36:36 executing program 4: socket(0x6, 0x0, 0x0) (fail_nth: 2) [ 2590.813175][T30455] R13: 000000000000000b R14: 00007fca2459bf80 R15: 00007fca246bfa48 [ 2590.821388][T30455] [ 2590.828377][T30455] ERROR: Out of memory at tomoyo_realpath_from_path. 14:36:36 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept$alg(r3, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) 14:36:36 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) [ 2591.160243][T30458] FAULT_INJECTION: forcing a failure. [ 2591.160243][T30458] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.173421][T30458] CPU: 1 PID: 30458 Comm: syz-executor.4 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2591.183901][T30458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2591.194214][T30458] Call Trace: [ 2591.197688][T30458] [ 2591.200810][T30458] dump_stack_lvl+0x1bf/0x240 [ 2591.205806][T30458] dump_stack+0x1e/0x20 [ 2591.210257][T30458] should_fail_ex+0x748/0x7f0 [ 2591.215301][T30458] __should_failslab+0x188/0x1f0 [ 2591.220608][T30458] should_failslab+0x2d/0x70 [ 2591.225507][T30458] kmem_cache_alloc+0xe6/0xa90 [ 2591.230592][T30458] ? security_inode_alloc+0x7e/0x280 [ 2591.236211][T30458] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2591.242387][T30458] security_inode_alloc+0x7e/0x280 [ 2591.247890][T30458] inode_init_always+0x5ff/0x720 [ 2591.253148][T30458] alloc_inode+0x120/0x440 [ 2591.257899][T30458] new_inode_pseudo+0x35/0x100 [ 2591.262992][T30458] __sock_create+0x22e/0xd60 [ 2591.267913][T30458] __sys_socket+0x144/0x670 [ 2591.271644][T30465] FAULT_INJECTION: forcing a failure. [ 2591.271644][T30465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2591.272640][T30458] __x64_sys_socket+0x8e/0xe0 [ 2591.290655][T30458] do_syscall_64+0x44/0x110 [ 2591.295410][T30458] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2591.301569][T30458] RIP: 0033:0x7fe4d267cae9 [ 2591.306200][T30458] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2591.326088][T30458] RSP: 002b:00007fe4d33f40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2591.334780][T30458] RAX: ffffffffffffffda RBX: 00007fe4d279bf80 RCX: 00007fe4d267cae9 [ 2591.342994][T30458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2591.351168][T30458] RBP: 00007fe4d33f4120 R08: 0000000000000000 R09: 0000000000000000 [ 2591.359349][T30458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2591.367538][T30458] R13: 000000000000000b R14: 00007fe4d279bf80 R15: 00007fe4d28bfa48 [ 2591.375739][T30458] [ 2591.378934][T30465] CPU: 0 PID: 30465 Comm: syz-executor.1 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2591.386642][T30458] socket: no more sockets [ 2591.389200][T30465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2591.403954][T30465] Call Trace: [ 2591.407438][T30465] [ 2591.410573][T30465] dump_stack_lvl+0x1bf/0x240 [ 2591.415564][T30465] dump_stack+0x1e/0x20 [ 2591.419997][T30465] should_fail_ex+0x748/0x7f0 [ 2591.424964][T30465] should_fail+0x2a/0x30 [ 2591.429491][T30465] should_fail_usercopy+0x2e/0x40 [ 2591.434837][T30465] _copy_to_user+0x33/0x100 [ 2591.439649][T30465] simple_read_from_buffer+0x199/0x340 [ 2591.445393][T30465] proc_fail_nth_read+0x1e8/0x2c0 [ 2591.450699][T30465] ? proc_fault_inject_write+0x490/0x490 [ 2591.456567][T30465] vfs_read+0x367/0xe00 [ 2591.461001][T30465] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2591.467520][T30465] ksys_read+0x20f/0x4c0 [ 2591.471997][T30465] __x64_sys_read+0x93/0xd0 [ 2591.476727][T30465] do_syscall_64+0x44/0x110 [ 2591.481469][T30465] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2591.487623][T30465] RIP: 0033:0x7fd67e67b78c [ 2591.492244][T30465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2591.512111][T30465] RSP: 002b:00007fd67f3770c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2591.520757][T30465] RAX: ffffffffffffffda RBX: 00007fd67e79bf80 RCX: 00007fd67e67b78c [ 2591.529032][T30465] RDX: 000000000000000f RSI: 00007fd67f377130 RDI: 0000000000000003 [ 2591.537216][T30465] RBP: 00007fd67f377120 R08: 0000000000000000 R09: 0000000000000000 [ 2591.545419][T30465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2591.553588][T30465] R13: 000000000000000b R14: 00007fd67e79bf80 R15: 00007fd67e8bfa48 14:36:36 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0}) (fail_nth: 3) [ 2591.561769][T30465] 14:36:37 executing program 4: socket(0x6, 0x0, 0x0) (fail_nth: 3) 14:36:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:37 executing program 3: bpf$MAP_CREATE(0x2, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) [ 2591.758307][T30468] FAULT_INJECTION: forcing a failure. [ 2591.758307][T30468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2591.772613][T30468] CPU: 0 PID: 30468 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2591.782975][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2591.793235][T30468] Call Trace: [ 2591.796642][T30468] [ 2591.799702][T30468] dump_stack_lvl+0x1bf/0x240 [ 2591.804629][T30468] dump_stack+0x1e/0x20 [ 2591.809009][T30468] should_fail_ex+0x748/0x7f0 [ 2591.813953][T30468] should_fail+0x2a/0x30 [ 2591.818459][T30468] should_fail_usercopy+0x2e/0x40 [ 2591.823771][T30468] _copy_from_user+0x33/0x160 [ 2591.828697][T30468] drm_ioctl+0xb44/0x1590 [ 2591.833378][T30468] ? drm_syncobj_array_free+0x2e0/0x2e0 [ 2591.839227][T30468] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2591.845380][T30468] ? drm_ioctl_kernel+0x740/0x740 [ 2591.850761][T30468] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2591.856888][T30468] ? drm_ioctl_kernel+0x740/0x740 [ 2591.862189][T30468] __se_sys_ioctl+0x225/0x410 [ 2591.867189][T30468] __x64_sys_ioctl+0x96/0xe0 [ 2591.872045][T30468] do_syscall_64+0x44/0x110 [ 2591.876755][T30468] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2591.882884][T30468] RIP: 0033:0x7fca2447cae9 [ 2591.887506][T30468] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2591.907363][T30468] RSP: 002b:00007fca251150c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2591.916056][T30468] RAX: ffffffffffffffda RBX: 00007fca2459bf80 RCX: 00007fca2447cae9 [ 2591.924304][T30468] RDX: 0000000020000440 RSI: 00000000c02864ca RDI: 0000000000000003 [ 2591.932462][T30468] RBP: 00007fca25115120 R08: 0000000000000000 R09: 0000000000000000 [ 2591.940657][T30468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2591.948872][T30468] R13: 000000000000000b R14: 00007fca2459bf80 R15: 00007fca246bfa48 [ 2591.957086][T30468] [ 2592.023279][T30470] FAULT_INJECTION: forcing a failure. [ 2592.023279][T30470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2592.038444][T30470] CPU: 1 PID: 30470 Comm: syz-executor.4 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2592.048815][T30470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2592.059107][T30470] Call Trace: [ 2592.062550][T30470] [ 2592.065645][T30470] dump_stack_lvl+0x1bf/0x240 [ 2592.070580][T30470] dump_stack+0x1e/0x20 [ 2592.074945][T30470] should_fail_ex+0x748/0x7f0 [ 2592.079917][T30470] should_fail+0x2a/0x30 [ 2592.084420][T30470] should_fail_usercopy+0x2e/0x40 [ 2592.089744][T30470] _copy_to_user+0x33/0x100 [ 2592.094484][T30470] simple_read_from_buffer+0x199/0x340 [ 2592.100207][T30470] proc_fail_nth_read+0x1e8/0x2c0 [ 2592.105492][T30470] ? proc_fault_inject_write+0x490/0x490 [ 2592.111409][T30470] vfs_read+0x367/0xe00 [ 2592.115856][T30470] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2592.122368][T30470] ksys_read+0x20f/0x4c0 [ 2592.126854][T30470] __x64_sys_read+0x93/0xd0 [ 2592.131572][T30470] do_syscall_64+0x44/0x110 [ 2592.136278][T30470] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2592.142410][T30470] RIP: 0033:0x7fe4d267b78c [ 2592.147049][T30470] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2592.166944][T30470] RSP: 002b:00007fe4d33f40c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2592.175616][T30470] RAX: ffffffffffffffda RBX: 00007fe4d279bf80 RCX: 00007fe4d267b78c [ 2592.183814][T30470] RDX: 000000000000000f RSI: 00007fe4d33f4130 RDI: 0000000000000003 [ 2592.191988][T30470] RBP: 00007fe4d33f4120 R08: 0000000000000000 R09: 0000000000000000 [ 2592.200152][T30470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2592.208303][T30470] R13: 000000000000000b R14: 00007fe4d279bf80 R15: 00007fe4d28bfa48 [ 2592.216500][T30470] 14:36:37 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept$alg(r3, 0x0, 0x0) (async) accept$alg(r3, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) 14:36:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:37 executing program 1: bpf$MAP_CREATE(0x2, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:37 executing program 4: socket(0x6, 0x0, 0x0) 14:36:37 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0}) (fail_nth: 4) 14:36:38 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept$alg(r3, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) 14:36:38 executing program 1: bpf$MAP_CREATE(0x3, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:38 executing program 3: bpf$MAP_CREATE(0x3, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) [ 2592.804575][T30485] FAULT_INJECTION: forcing a failure. [ 2592.804575][T30485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2592.818472][T30485] CPU: 0 PID: 30485 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2592.828795][T30485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2592.839050][T30485] Call Trace: [ 2592.842486][T30485] [ 2592.845583][T30485] dump_stack_lvl+0x1bf/0x240 [ 2592.850528][T30485] dump_stack+0x1e/0x20 [ 2592.854910][T30485] should_fail_ex+0x748/0x7f0 [ 2592.859883][T30485] should_fail+0x2a/0x30 [ 2592.864422][T30485] should_fail_usercopy+0x2e/0x40 [ 2592.869788][T30485] _copy_to_user+0x33/0x100 [ 2592.874705][T30485] drm_ioctl+0xd6d/0x1590 [ 2592.879357][T30485] ? drm_syncobj_array_free+0x2e0/0x2e0 [ 2592.885309][T30485] ? drm_ioctl_kernel+0x740/0x740 [ 2592.890624][T30485] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2592.896722][T30485] ? drm_ioctl_kernel+0x740/0x740 [ 2592.902022][T30485] __se_sys_ioctl+0x225/0x410 [ 2592.906998][T30485] __x64_sys_ioctl+0x96/0xe0 [ 2592.911866][T30485] do_syscall_64+0x44/0x110 [ 2592.916608][T30485] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2592.922756][T30485] RIP: 0033:0x7fca2447cae9 [ 2592.927380][T30485] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2592.947261][T30485] RSP: 002b:00007fca251150c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2592.956041][T30485] RAX: ffffffffffffffda RBX: 00007fca2459bf80 RCX: 00007fca2447cae9 [ 2592.964227][T30485] RDX: 0000000020000440 RSI: 00000000c02864ca RDI: 0000000000000003 [ 2592.972431][T30485] RBP: 00007fca25115120 R08: 0000000000000000 R09: 0000000000000000 [ 2592.980644][T30485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2592.988826][T30485] R13: 000000000000000b R14: 00007fca2459bf80 R15: 00007fca246bfa48 [ 2592.997038][T30485] 14:36:38 executing program 4: socket(0x2, 0x0, 0x0) 14:36:38 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:38 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0}) (fail_nth: 5) 14:36:38 executing program 3: bpf$MAP_CREATE(0x4, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:38 executing program 5: ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) 14:36:38 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) [ 2593.531021][T30499] FAULT_INJECTION: forcing a failure. [ 2593.531021][T30499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2593.544539][T30499] CPU: 1 PID: 30499 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2593.554913][T30499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2593.565223][T30499] Call Trace: [ 2593.568690][T30499] [ 2593.571819][T30499] dump_stack_lvl+0x1bf/0x240 [ 2593.576827][T30499] dump_stack+0x1e/0x20 [ 2593.581257][T30499] should_fail_ex+0x748/0x7f0 [ 2593.586303][T30499] should_fail+0x2a/0x30 [ 2593.590905][T30499] should_fail_usercopy+0x2e/0x40 [ 2593.596287][T30499] _copy_to_user+0x33/0x100 [ 2593.601120][T30499] simple_read_from_buffer+0x199/0x340 [ 2593.606900][T30499] proc_fail_nth_read+0x1e8/0x2c0 [ 2593.612220][T30499] ? proc_fault_inject_write+0x490/0x490 [ 2593.618135][T30499] vfs_read+0x367/0xe00 [ 2593.622578][T30499] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2593.629123][T30499] ksys_read+0x20f/0x4c0 [ 2593.633606][T30499] __x64_sys_read+0x93/0xd0 [ 2593.638349][T30499] do_syscall_64+0x44/0x110 [ 2593.643099][T30499] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2593.649244][T30499] RIP: 0033:0x7fca2447b78c [ 2593.653881][T30499] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 14:36:38 executing program 1: bpf$MAP_CREATE(0x4, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 2593.673753][T30499] RSP: 002b:00007fca251150c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2593.682454][T30499] RAX: ffffffffffffffda RBX: 00007fca2459bf80 RCX: 00007fca2447b78c [ 2593.690686][T30499] RDX: 000000000000000f RSI: 00007fca25115130 RDI: 0000000000000004 [ 2593.698960][T30499] RBP: 00007fca25115120 R08: 0000000000000000 R09: 0000000000000000 [ 2593.707145][T30499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2593.715418][T30499] R13: 000000000000000b R14: 00007fca2459bf80 R15: 00007fca246bfa48 [ 2593.723626][T30499] 14:36:39 executing program 3: bpf$MAP_CREATE(0x5, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:39 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0}) 14:36:39 executing program 1: bpf$MAP_CREATE(0x5, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:39 executing program 5: ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) 14:36:39 executing program 4: socket(0x2d, 0x0, 0x0) 14:36:39 executing program 3: bpf$MAP_CREATE(0x6, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:39 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:39 executing program 1: bpf$MAP_CREATE(0x6, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:40 executing program 3: bpf$MAP_CREATE(0x7, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:40 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x2, &(0x7f0000000440)={0x0, 0x0}) 14:36:40 executing program 5: ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) 14:36:40 executing program 1: bpf$MAP_CREATE(0x7, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:40 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:40 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140a, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r2}) 14:36:40 executing program 4: socket(0x6, 0x2, 0x0) 14:36:40 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) 14:36:40 executing program 3: bpf$MAP_CREATE(0x8, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:40 executing program 1: bpf$MAP_CREATE(0x8, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:40 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:41 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140a, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r2}) 14:36:41 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x541b, &(0x7f0000000440)={0x0, 0x0}) 14:36:41 executing program 3: bpf$MAP_CREATE(0x9, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:41 executing program 4: socket(0x6, 0xa, 0x0) 14:36:41 executing program 1: bpf$MAP_CREATE(0x9, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:41 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:41 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x5421, &(0x7f0000000440)={0x0, 0x0}) 14:36:41 executing program 4: socket(0x6, 0xa00, 0x0) 14:36:41 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140a, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x800) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r2}) 14:36:41 executing program 3: bpf$MAP_CREATE(0xa, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:41 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:41 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x5450, &(0x7f0000000440)={0x0, 0x0}) 14:36:41 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x1f, 0x1, 0x8, 0x45, @local, @loopback, 0x80, 0x7800, 0x1, 0x1}}) 14:36:42 executing program 4: socket(0x6, 0x2000000, 0x0) 14:36:42 executing program 1: bpf$MAP_CREATE(0xb, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:42 executing program 3: bpf$MAP_CREATE(0xb, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:42 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) accept$alg(r0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0xb, r0, 0x0, 0x9}) r2 = gettid() getpgid(r2) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x8, 0x1d4be, 0x3fcb91}) socketpair(0x2a, 0x80000, 0x101, &(0x7f0000000040)) socketpair(0x25, 0x5, 0x10000, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x400c051) 14:36:42 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x5451, &(0x7f0000000440)={0x0, 0x0}) 14:36:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 14:36:42 executing program 4: socket(0x6, 0xa000000, 0x0) 14:36:42 executing program 1: bpf$MAP_CREATE(0xc, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:42 executing program 3: bpf$MAP_CREATE(0xc, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:42 executing program 4: socket(0x6, 0xfeffffff, 0x0) 14:36:42 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x5452, &(0x7f0000000440)={0x0, 0x0}) 14:36:42 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) accept$alg(r0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0xb, r0, 0x0, 0x9}) (async) r2 = gettid() getpgid(r2) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x8, 0x1d4be, 0x3fcb91}) (async) socketpair(0x2a, 0x80000, 0x101, &(0x7f0000000040)) (async) socketpair(0x25, 0x5, 0x10000, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x400c051) 14:36:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 14:36:43 executing program 1: bpf$MAP_CREATE(0xd, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:43 executing program 4: socket(0x6, 0xfffffffe, 0x0) 14:36:43 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x5460, &(0x7f0000000440)={0x0, 0x0}) 14:36:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 14:36:43 executing program 3: bpf$MAP_CREATE(0xd, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:43 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0) (async, rerun: 32) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) (rerun: 32) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async, rerun: 64) accept$alg(r0, 0x0, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0xb, r0, 0x0, 0x9}) r2 = gettid() getpgid(r2) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x8, 0x1d4be, 0x3fcb91}) socketpair(0x2a, 0x80000, 0x101, &(0x7f0000000040)) socketpair(0x25, 0x5, 0x10000, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x400c051) 14:36:43 executing program 1: bpf$MAP_CREATE(0xe, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:43 executing program 4: socket(0x6, 0x200000000000000, 0x0) 14:36:43 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x8933, &(0x7f0000000440)={0x0, 0x0}) 14:36:43 executing program 3: bpf$MAP_CREATE(0xe, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 14:36:43 executing program 1: bpf$MAP_CREATE(0xf, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:43 executing program 4: socket(0x6, 0xa00000000000000, 0x0) 14:36:44 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) 14:36:44 executing program 3: bpf$MAP_CREATE(0xf, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:44 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:44 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x400448c9, &(0x7f0000000440)={0x0, 0x0}) 14:36:44 executing program 1: bpf$MAP_CREATE(0x10, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:44 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) (async) 14:36:44 executing program 3: bpf$MAP_CREATE(0x10, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:44 executing program 4: socket(0x6, 0xfeffffff00000000, 0x0) 14:36:44 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:44 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x400448dd, &(0x7f0000000440)={0x0, 0x0}) 14:36:44 executing program 1: bpf$MAP_CREATE(0x11, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:44 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) 14:36:44 executing program 4: socket(0x6, 0x0, 0x0) 14:36:44 executing program 3: bpf$MAP_CREATE(0x11, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:45 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x400454ca, &(0x7f0000000440)={0x0, 0x0}) 14:36:45 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:45 executing program 1: bpf$MAP_CREATE(0x12, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:45 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109281, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0xe28, 0x4}) accept$alg(r2, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:36:45 executing program 4: socket(0x6, 0x0, 0x2) 14:36:45 executing program 3: bpf$MAP_CREATE(0x12, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:45 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x40049409, &(0x7f0000000440)={0x0, 0x0}) 14:36:45 executing program 2: bpf$MAP_CREATE(0xe, 0x0, 0x0) 14:36:45 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:45 executing program 4: socket(0x6, 0x0, 0xa) 14:36:45 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109281, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0xe28, 0x4}) accept$alg(r2, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109281, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0xe28, 0x4}) (async) accept$alg(r2, 0x0, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) 14:36:45 executing program 3: bpf$MAP_CREATE(0x13, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:45 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x40086602, &(0x7f0000000440)={0x0, 0x0}) 14:36:45 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:45 executing program 2: bpf$MAP_CREATE(0xe, 0x0, 0x0) 14:36:46 executing program 4: socket(0x6, 0x0, 0xa00) 14:36:46 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109281, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0xe28, 0x4}) accept$alg(r2, 0x0, 0x0) (async) accept$alg(r2, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:36:46 executing program 3: bpf$MAP_CREATE(0x14, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:46 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x40186366, &(0x7f0000000440)={0x0, 0x0}) 14:36:46 executing program 1: bpf$MAP_CREATE(0x15, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:46 executing program 2: bpf$MAP_CREATE(0xe, 0x0, 0x0) 14:36:46 executing program 4: socket(0x6, 0x0, 0x2000000) 14:36:46 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x401c5820, &(0x7f0000000440)={0x0, 0x0}) 14:36:46 executing program 1: bpf$MAP_CREATE(0x16, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:46 executing program 3: bpf$MAP_CREATE(0x15, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:46 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:46 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x8, 0x0, [0x0, 0x68, 0x0, 0x9, 0x6bdc, 0x80, 0x3, 0x80000000, 0x100, 0x3, 0x2, 0x3, 0x7, 0x81, 0x6, 0x2]}, {0xc, 0x0, [0x4, 0x5, 0x7fffffff, 0x6, 0xfffffffa, 0x3, 0x49, 0x9ac6, 0xb9, 0xffff, 0xf592, 0x0, 0x80000001, 0x8, 0x5481, 0x5]}, {0x1, 0x0, [0x80, 0x3, 0x2d03, 0x400, 0x9, 0x401, 0x8, 0x1000, 0x81, 0x2, 0x8, 0xfffffffa, 0x7]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:36:47 executing program 4: socket(0x6, 0x0, 0xa000000) 14:36:47 executing program 1: bpf$MAP_CREATE(0x17, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:47 executing program 3: bpf$MAP_CREATE(0x16, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:47 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:47 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f0000000480), 0x48) 14:36:47 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x8, 0x0, [0x0, 0x68, 0x0, 0x9, 0x6bdc, 0x80, 0x3, 0x80000000, 0x100, 0x3, 0x2, 0x3, 0x7, 0x81, 0x6, 0x2]}, {0xc, 0x0, [0x4, 0x5, 0x7fffffff, 0x6, 0xfffffffa, 0x3, 0x49, 0x9ac6, 0xb9, 0xffff, 0xf592, 0x0, 0x80000001, 0x8, 0x5481, 0x5]}, {0x1, 0x0, [0x80, 0x3, 0x2d03, 0x400, 0x9, 0x401, 0x8, 0x1000, 0x81, 0x2, 0x8, 0xfffffffa, 0x7]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:36:47 executing program 4: socket(0x6, 0x0, 0xfeffffff) 14:36:47 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x80086301, &(0x7f0000000440)={0x0, 0x0}) 14:36:47 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:47 executing program 1: bpf$MAP_CREATE(0x18, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:47 executing program 3: bpf$MAP_CREATE(0x17, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:47 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x8, 0x0, [0x0, 0x68, 0x0, 0x9, 0x6bdc, 0x80, 0x3, 0x80000000, 0x100, 0x3, 0x2, 0x3, 0x7, 0x81, 0x6, 0x2]}, {0xc, 0x0, [0x4, 0x5, 0x7fffffff, 0x6, 0xfffffffa, 0x3, 0x49, 0x9ac6, 0xb9, 0xffff, 0xf592, 0x0, 0x80000001, 0x8, 0x5481, 0x5]}, {0x1, 0x0, [0x80, 0x3, 0x2d03, 0x400, 0x9, 0x401, 0x8, 0x1000, 0x81, 0x2, 0x8, 0xfffffffa, 0x7]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:36:47 executing program 4: socket(0x6, 0x0, 0xfffffffe) 14:36:48 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x80086601, &(0x7f0000000440)={0x0, 0x0}) 14:36:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:48 executing program 1: bpf$MAP_CREATE(0x19, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:48 executing program 3: bpf$MAP_CREATE(0x18, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:48 executing program 5: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xc428b0242f47e0e9, 0x0) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x78, 0x0, &(0x7f0000000100)=[@dead_binder_done, @clear_death, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x40, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r2}], 0xa5, 0x0, &(0x7f0000000180)="4efe5a0eaa8e3b7b8cf0bd75a6e6abd3dd7c2ca858ad0d585dde419ce163e82330092a58594d7b6434aa493d84a778d16d9733cc109c3166663f9842e0079c36236d21cacd7ccbed7536454f9f5d7cbaebfb7a14e62030fbefde5ee76fac929124470b052276a52f21d2208f5604905e49e482eea248d34154f7cd88878f7360fd650a596e3682160ac13c1b86bbe0222a37972d65d86c97764b548f3dae0da7d88319e790"}) 14:36:48 executing program 4: socket(0x6, 0x0, 0x0) r0 = socket(0x23, 0x1, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x6, 0x12) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x20000015) 14:36:48 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x801c581f, &(0x7f0000000440)={0x0, 0x0}) 14:36:48 executing program 1: bpf$MAP_CREATE(0x1a, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:48 executing program 3: bpf$MAP_CREATE(0x19, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:48 executing program 5: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xc428b0242f47e0e9, 0x0) (async) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x78, 0x0, &(0x7f0000000100)=[@dead_binder_done, @clear_death, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x40, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r2}], 0xa5, 0x0, &(0x7f0000000180)="4efe5a0eaa8e3b7b8cf0bd75a6e6abd3dd7c2ca858ad0d585dde419ce163e82330092a58594d7b6434aa493d84a778d16d9733cc109c3166663f9842e0079c36236d21cacd7ccbed7536454f9f5d7cbaebfb7a14e62030fbefde5ee76fac929124470b052276a52f21d2208f5604905e49e482eea248d34154f7cd88878f7360fd650a596e3682160ac13c1b86bbe0222a37972d65d86c97764b548f3dae0da7d88319e790"}) 14:36:48 executing program 4: socket(0x6, 0x0, 0x0) r0 = socket(0x23, 0x1, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x6, 0x12) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x20000015) socket(0x6, 0x0, 0x0) (async) socket(0x23, 0x1, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000140)=0x6, 0x12) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x20000015) (async) 14:36:48 executing program 3: bpf$MAP_CREATE(0x1a, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:48 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc0045878, &(0x7f0000000440)={0x0, 0x0}) 14:36:48 executing program 1: bpf$MAP_CREATE(0x1b, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:48 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:49 executing program 5: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xc428b0242f47e0e9, 0x0) (async) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x78, 0x0, &(0x7f0000000100)=[@dead_binder_done, @clear_death, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x40, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r2}], 0xa5, 0x0, &(0x7f0000000180)="4efe5a0eaa8e3b7b8cf0bd75a6e6abd3dd7c2ca858ad0d585dde419ce163e82330092a58594d7b6434aa493d84a778d16d9733cc109c3166663f9842e0079c36236d21cacd7ccbed7536454f9f5d7cbaebfb7a14e62030fbefde5ee76fac929124470b052276a52f21d2208f5604905e49e482eea248d34154f7cd88878f7360fd650a596e3682160ac13c1b86bbe0222a37972d65d86c97764b548f3dae0da7d88319e790"}) 14:36:49 executing program 3: bpf$MAP_CREATE(0x1b, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:49 executing program 4: socket(0x6, 0x0, 0x0) r0 = socket(0x23, 0x1, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x6, 0x12) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x20000015) socket(0x6, 0x0, 0x0) (async) socket(0x23, 0x1, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000140)=0x6, 0x12) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x20000015) (async) 14:36:49 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc0045878, &(0x7f0000000440)={0x0, 0x0}) 14:36:49 executing program 1: bpf$MAP_CREATE(0x1c, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:49 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:49 executing program 5: r0 = socket(0x2a, 0x1, 0x6) accept$alg(r0, 0x0, 0x0) read$alg(r0, &(0x7f0000000100)=""/54, 0x36) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20080080}, 0x10) 14:36:49 executing program 3: bpf$MAP_CREATE(0x1c, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:49 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc0189436, &(0x7f0000000440)={0x0, 0x0}) 14:36:49 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:49 executing program 4: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000041402002abd7000fcdbdf250800010002000000080001000200000008000100020000000873956d090000000800010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040851}, 0x80) socket(0x6, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc}) 14:36:49 executing program 1: bpf$MAP_CREATE(0x1d, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:49 executing program 5: socket(0x2a, 0x1, 0x6) (async) r0 = socket(0x2a, 0x1, 0x6) accept$alg(r0, 0x0, 0x0) read$alg(r0, &(0x7f0000000100)=""/54, 0x36) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20080080}, 0x10) 14:36:50 executing program 3: bpf$MAP_CREATE(0x1d, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:50 executing program 1: bpf$MAP_CREATE(0x1e, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:50 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc020660b, &(0x7f0000000440)={0x0, 0x0}) 14:36:50 executing program 4: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000041402002abd7000fcdbdf250800010002000000080001000200000008000100020000000873956d090000000800010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040851}, 0x80) socket(0x6, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000041402002abd7000fcdbdf250800010002000000080001000200000008000100020000000873956d090000000800010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040851}, 0x80) (async) socket(0x6, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc}) (async) 14:36:50 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:50 executing program 5: r0 = socket(0x2a, 0x1, 0x6) accept$alg(r0, 0x0, 0x0) (async) read$alg(r0, &(0x7f0000000100)=""/54, 0x36) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20080080}, 0x10) 14:36:50 executing program 3: bpf$MAP_CREATE(0x1e, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:50 executing program 1: bpf$MAP_CREATE(0x21, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:50 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:50 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864cf, &(0x7f0000000440)={0x0, 0x0}) 14:36:50 executing program 4: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000041402002abd7000fcdbdf250800010002000000080001000200000008000100020000000873956d090000000800010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040851}, 0x80) socket(0x6, 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc}) 14:36:50 executing program 3: bpf$MAP_CREATE(0x21, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000111404002cbd7000fedbdf2508000100ffffff7f08004b0013000000063b5c4b5bc96e92e6c86263e9d2543e7be9194dd5336bec5ea840c40d9eae529be7bb4606ea1ea69d973eef04189fbc72b4ab52088195d4a043e769f95b98376a103dc55a673a385e1736aff4de4c8d95989853e68f771983cd1096a19e5f857909e2d473c483"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14:36:51 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:51 executing program 1: bpf$MAP_CREATE(0x22, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:51 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x2}) 14:36:51 executing program 4: ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) socket(0x6, 0x0, 0x0) socketpair(0xb, 0x800, 0x6, &(0x7f0000000080)) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000000c0)={0x20, 0x2, &(0x7f0000000000)="0cfcd7fff6dadca14c05b0f908209581e0e9fb2b204b358da2c320af22cf2327491f2c0c295cf65d2c0255", 0x9, 0xbe9}) 14:36:51 executing program 3: bpf$MAP_CREATE(0x22, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000111404002cbd7000fedbdf2508000100ffffff7f08004b0013000000063b5c4b5bc96e92e6c86263e9d2543e7be9194dd5336bec5ea840c40d9eae529be7bb4606ea1ea69d973eef04189fbc72b4ab52088195d4a043e769f95b98376a103dc55a673a385e1736aff4de4c8d95989853e68f771983cd1096a19e5f857909e2d473c483"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14:36:51 executing program 1: bpf$MAP_CREATE(0x23, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:51 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x3}) 14:36:51 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:51 executing program 4: ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) socket(0x6, 0x0, 0x0) (async) socketpair(0xb, 0x800, 0x6, &(0x7f0000000080)) (async, rerun: 32) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000000c0)={0x20, 0x2, &(0x7f0000000000)="0cfcd7fff6dadca14c05b0f908209581e0e9fb2b204b358da2c320af22cf2327491f2c0c295cf65d2c0255", 0x9, 0xbe9}) (rerun: 32) 14:36:51 executing program 1: bpf$MAP_CREATE(0x300, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:51 executing program 3: bpf$MAP_CREATE(0x23, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) (async) accept$alg(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000111404002cbd7000fedbdf2508000100ffffff7f08004b0013000000063b5c4b5bc96e92e6c86263e9d2543e7be9194dd5336bec5ea840c40d9eae529be7bb4606ea1ea69d973eef04189fbc72b4ab52088195d4a043e769f95b98376a103dc55a673a385e1736aff4de4c8d95989853e68f771983cd1096a19e5f857909e2d473c483"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14:36:51 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:52 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x4}) 14:36:52 executing program 4: ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) socket(0x6, 0x0, 0x0) socketpair(0xb, 0x800, 0x6, &(0x7f0000000080)) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000000c0)={0x20, 0x2, &(0x7f0000000000)="0cfcd7fff6dadca14c05b0f908209581e0e9fb2b204b358da2c320af22cf2327491f2c0c295cf65d2c0255", 0x9, 0xbe9}) 14:36:52 executing program 1: bpf$MAP_CREATE(0x500, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:52 executing program 5: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/266], 0x24}, 0x1, 0x0, 0x0, 0x20004891}, 0x44080) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0xe07, 0x0, 0x7, 0x4}, 0x8) 14:36:52 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={0x0, 0x0}) 14:36:52 executing program 3: bpf$MAP_CREATE(0x300, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:52 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x5}) 14:36:52 executing program 4: getpgid(0xffffffffffffffff) r0 = gettid() getpgid(r0) r1 = gettid() getpgid(r1) getpgid(r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, 0x0, 0x0) getpgid(r0) socket(0x6, 0x2, 0xfffffffe) r3 = gettid() getpgid(r3) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/net\x00') 14:36:52 executing program 1: bpf$MAP_CREATE(0x600, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:52 executing program 5: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/266], 0x24}, 0x1, 0x0, 0x0, 0x20004891}, 0x44080) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0xe07, 0x0, 0x7, 0x4}, 0x8) 14:36:52 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, 0x0) 14:36:52 executing program 4: getpgid(0xffffffffffffffff) (async) getpgid(0xffffffffffffffff) r0 = gettid() getpgid(r0) r1 = gettid() getpgid(r1) (async) getpgid(r1) getpgid(r1) (async) getpgid(r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, 0x0, 0x0) getpgid(r0) socket(0x6, 0x2, 0xfffffffe) (async) socket(0x6, 0x2, 0xfffffffe) r3 = gettid() getpgid(r3) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/net\x00') 14:36:52 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x6}) 14:36:52 executing program 3: bpf$MAP_CREATE(0x500, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:53 executing program 1: bpf$MAP_CREATE(0x700, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:53 executing program 5: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/266], 0x24}, 0x1, 0x0, 0x0, 0x20004891}, 0x44080) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0xe07, 0x0, 0x7, 0x4}, 0x8) 14:36:53 executing program 4: getpgid(0xffffffffffffffff) (async, rerun: 64) r0 = gettid() (rerun: 64) getpgid(r0) (async) r1 = gettid() getpgid(r1) getpgid(r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, 0x0, 0x0) (async, rerun: 32) getpgid(r0) (async, rerun: 32) socket(0x6, 0x2, 0xfffffffe) r3 = gettid() getpgid(r3) (async, rerun: 32) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/net\x00') (rerun: 32) 14:36:53 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x7}) 14:36:53 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, 0x0) 14:36:53 executing program 1: bpf$MAP_CREATE(0x900, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:53 executing program 3: bpf$MAP_CREATE(0x600, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:53 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={r1}) socket$alg(0x26, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) 14:36:53 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x8}) 14:36:53 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, 0x0) 14:36:53 executing program 3: bpf$MAP_CREATE(0x700, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:53 executing program 1: bpf$MAP_CREATE(0xa00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:53 executing program 4: socket(0x6, 0x80004, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) 14:36:53 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={r1}) socket$alg(0x26, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) 14:36:54 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x9}) 14:36:54 executing program 4: socket(0x6, 0x80004, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) 14:36:54 executing program 3: bpf$MAP_CREATE(0x900, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:54 executing program 1: bpf$MAP_CREATE(0xb00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:54 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x8}) 14:36:54 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={r1}) (async) socket$alg(0x26, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) 14:36:54 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xa}) 14:36:54 executing program 4: socket(0x6, 0x80004, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) 14:36:54 executing program 3: bpf$MAP_CREATE(0xa00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:54 executing program 1: bpf$MAP_CREATE(0xc00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:54 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, 0x0) 14:36:54 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) 14:36:54 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xb}) 14:36:55 executing program 4: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) r0 = socket(0x6, 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x500, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) 14:36:55 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xc}) 14:36:55 executing program 3: bpf$MAP_CREATE(0xb00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:55 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) 14:36:55 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, 0x0) 14:36:55 executing program 1: bpf$MAP_CREATE(0xd00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:55 executing program 4: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) (async) r0 = socket(0x6, 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x500, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) 14:36:55 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) 14:36:55 executing program 3: bpf$MAP_CREATE(0xc00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:55 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xd}) 14:36:55 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, 0x0) 14:36:55 executing program 1: bpf$MAP_CREATE(0xe00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:55 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x123101, 0x0) accept$alg(r0, 0x0, 0x0) 14:36:55 executing program 4: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) r0 = socket(0x6, 0x800, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) (async, rerun: 64) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) (async, rerun: 64) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x500, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) 14:36:55 executing program 3: bpf$MAP_CREATE(0xd00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:56 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xe}) 14:36:56 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, 0x0) 14:36:56 executing program 3: bpf$MAP_CREATE(0xe00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:56 executing program 1: bpf$MAP_CREATE(0xf00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:56 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x123101, 0x0) accept$alg(r0, 0x0, 0x0) 14:36:56 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x10}) 14:36:56 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, 0x0) 14:36:56 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x123101, 0x0) accept$alg(r0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x123101, 0x0) (async) accept$alg(r0, 0x0, 0x0) (async) 14:36:56 executing program 3: bpf$MAP_CREATE(0xf00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:56 executing program 1: bpf$MAP_CREATE(0x1100, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000140)={0x0, r1, 0x8000, 0x6, 0x6}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) socket(0xa, 0x4, 0x6) 14:36:57 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x11}) 14:36:57 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, 0x0) 14:36:57 executing program 3: bpf$MAP_CREATE(0x1100, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:57 executing program 1: bpf$MAP_CREATE(0x1200, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:57 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1405, 0x100, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000000)=0x5) 14:36:57 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, 0x0) 14:36:57 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x12}) 14:36:57 executing program 3: bpf$MAP_CREATE(0x1200, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:57 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1405, 0x100, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000000)=0x5) (async) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000000)=0x5) 14:36:57 executing program 1: bpf$MAP_CREATE(0x1300, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000140)={0x0, r1, 0x8000, 0x6, 0x6}) (async, rerun: 32) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) (rerun: 32) socket(0xa, 0x4, 0x6) 14:36:58 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, 0x0) 14:36:58 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x25}) 14:36:58 executing program 3: bpf$MAP_CREATE(0x1300, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:58 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1405, 0x100, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) (async) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000000)=0x5) 14:36:58 executing program 1: bpf$MAP_CREATE(0x1400, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:58 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0x4020940d, 0x0) 14:36:58 executing program 3: bpf$MAP_CREATE(0x1400, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:58 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x5c}) 14:36:58 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) 14:36:58 executing program 1: bpf$MAP_CREATE(0x1500, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:58 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, 0x0) 14:36:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000140)={0x0, r1, 0x8000, 0x6, 0x6}) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) socket(0xa, 0x4, 0x6) 14:36:59 executing program 3: bpf$MAP_CREATE(0x1500, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:59 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x300}) 14:36:59 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) 14:36:59 executing program 1: bpf$MAP_CREATE(0x1600, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:59 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, 0x0) 14:36:59 executing program 3: bpf$MAP_CREATE(0x1600, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:36:59 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) (async) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) 14:36:59 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x500}) 14:36:59 executing program 1: bpf$MAP_CREATE(0x1700, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:36:59 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0x4020940d, 0x0) 14:37:00 executing program 3: bpf$MAP_CREATE(0x1700, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:00 executing program 4: socket(0x2c, 0x80800, 0x0) 14:37:00 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40800, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) accept$alg(r1, 0x0, 0x0) 14:37:00 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x600}) 14:37:00 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) r0 = socket(0x6, 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x500, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) 14:37:00 executing program 1: bpf$MAP_CREATE(0x1800, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:00 executing program 3: bpf$MAP_CREATE(0x1800, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) [ 2615.196735][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2615.203622][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 14:37:00 executing program 1: bpf$MAP_CREATE(0x1900, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:00 executing program 5: socket$alg(0x26, 0x5, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40800, 0x0) (rerun: 64) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) accept$alg(r1, 0x0, 0x0) 14:37:00 executing program 4: socket(0x2c, 0x80800, 0x0) 14:37:00 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x700}) 14:37:00 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) r0 = socket(0x6, 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x500, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) 14:37:01 executing program 3: bpf$MAP_CREATE(0x1900, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:01 executing program 1: bpf$MAP_CREATE(0x1a00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:01 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x900}) 14:37:01 executing program 4: socket(0x2c, 0x80800, 0x0) socket(0x2c, 0x80800, 0x0) (async) 14:37:01 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40800, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) accept$alg(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40800, 0x0) (async) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) accept$alg(r1, 0x0, 0x0) (async) 14:37:01 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) r0 = socket(0x6, 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x500, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) 14:37:01 executing program 3: bpf$MAP_CREATE(0x1a00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:01 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:37:01 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xa00}) 14:37:01 executing program 3: bpf$MAP_CREATE(0x1b00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:01 executing program 1: bpf$MAP_CREATE(0x1b00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:01 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) r0 = socket(0x6, 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x500, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 14:37:02 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000002c0)={0x800, 0x401, 0x5}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x434a41, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000140)={0x38, 0x7, r5, 0x0, 0x10000, 0x0, 0x0, 0x6247c, 0x2651a9}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x410040, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r8}) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x8) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r9, 0x3b80, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2c00, 0x0) write$RDMA_USER_CM_CMD_REJECT(r10, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "60fc5e", "939e77cdb573055a799ff469d4dd08356d256bc7d8dfbe43815bebb7a1cfbd85e494a89a79fe70198dcb422a1d170672b046fa14920da8a6fd7bd053c3836ed95b04bb1499f05c53d9af8d9c2cab4f844e4f490c2f2af60c57849f93d4f3bc72846d892407284e84e1f6c8904cafb59c8879a459f91c897ced15807dc3478cfa5880c789a8b89c7da41d5302f0a1da8c23d05bd95e9c64545dee6267ae250cb4b42895ec10d7dd3c42bc2505007b37e9ed0d6fc396e166e77640ed6ac073fb8a90288f2f070a82f91d95478f5fa82609023e3509c9f5a40bd54012d090c656790038c4f519aa13048f4aaba1aeed1eab71e6ad8b3860306341f852a55afc2a4c"}}, 0x110) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r11, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x38, 0xb, r11, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r10, 0x3b88, &(0x7f00000003c0)={0xc, r8}) accept$alg(r3, 0x0, 0x0) 14:37:02 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) 14:37:02 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xb00}) 14:37:02 executing program 1: bpf$MAP_CREATE(0x1c00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:02 executing program 3: bpf$MAP_CREATE(0x1c00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:02 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) r0 = socket(0x6, 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x500, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) 14:37:02 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:37:02 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000002c0)={0x800, 0x401, 0x5}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x434a41, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000140)={0x38, 0x7, r5, 0x0, 0x10000, 0x0, 0x0, 0x6247c, 0x2651a9}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x410040, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r8}) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x8) (async) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r9, 0x3b80, 0x0) (async) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2c00, 0x0) write$RDMA_USER_CM_CMD_REJECT(r10, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "60fc5e", "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"}}, 0x110) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) (async) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r11, 0x3b80, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x38, 0xb, r11, 0x0, 0x1}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r10, 0x3b88, &(0x7f00000003c0)={0xc, r8}) accept$alg(r3, 0x0, 0x0) 14:37:02 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xc00}) 14:37:02 executing program 1: bpf$MAP_CREATE(0x1d00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:02 executing program 3: bpf$MAP_CREATE(0x1d00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:02 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) socket(0x6, 0x800, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:02 executing program 4: socket(0x6, 0x0, 0x10001) 14:37:03 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xd00}) 14:37:03 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async, rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000002c0)={0x800, 0x401, 0x5}) (async, rerun: 64) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x434a41, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000140)={0x38, 0x7, r5, 0x0, 0x10000, 0x0, 0x0, 0x6247c, 0x2651a9}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x410040, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r8}) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x8) (async) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r9, 0x3b80, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2c00, 0x0) write$RDMA_USER_CM_CMD_REJECT(r10, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "60fc5e", "939e77cdb573055a799ff469d4dd08356d256bc7d8dfbe43815bebb7a1cfbd85e494a89a79fe70198dcb422a1d170672b046fa14920da8a6fd7bd053c3836ed95b04bb1499f05c53d9af8d9c2cab4f844e4f490c2f2af60c57849f93d4f3bc72846d892407284e84e1f6c8904cafb59c8879a459f91c897ced15807dc3478cfa5880c789a8b89c7da41d5302f0a1da8c23d05bd95e9c64545dee6267ae250cb4b42895ec10d7dd3c42bc2505007b37e9ed0d6fc396e166e77640ed6ac073fb8a90288f2f070a82f91d95478f5fa82609023e3509c9f5a40bd54012d090c656790038c4f519aa13048f4aaba1aeed1eab71e6ad8b3860306341f852a55afc2a4c"}}, 0x110) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) (async, rerun: 32) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_DESTROY$device(r11, 0x3b80, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x38, 0xb, r11, 0x0, 0x1}) (async, rerun: 64) ioctl$IOMMU_VFIO_IOAS$SET(r10, 0x3b88, &(0x7f00000003c0)={0xc, r8}) (rerun: 64) accept$alg(r3, 0x0, 0x0) 14:37:03 executing program 1: bpf$MAP_CREATE(0x1e00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:03 executing program 3: bpf$MAP_CREATE(0x1e00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:03 executing program 4: socket(0x6, 0x0, 0x10001) 14:37:03 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xe00}) 14:37:03 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) socket(0x6, 0x800, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:03 executing program 1: bpf$MAP_CREATE(0x1f00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:03 executing program 4: socket(0x6, 0x0, 0x10001) 14:37:03 executing program 3: bpf$MAP_CREATE(0x1f00, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:03 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:37:03 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x1100}) 14:37:03 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) socket(0x6, 0x800, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:03 executing program 1: bpf$MAP_CREATE(0x2000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:04 executing program 4: pipe2$9p(&(0x7f0000000000), 0x800) socket(0x6, 0x0, 0x0) 14:37:04 executing program 3: bpf$MAP_CREATE(0x2000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:04 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) 14:37:04 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) socket(0x6, 0x800, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:04 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x1200}) 14:37:04 executing program 1: bpf$MAP_CREATE(0x2100, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:04 executing program 4: pipe2$9p(&(0x7f0000000000), 0x800) socket(0x6, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x800) (async) socket(0x6, 0x0, 0x0) (async) 14:37:04 executing program 3: bpf$MAP_CREATE(0x2100, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:04 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) 14:37:04 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) socket(0x6, 0x800, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:04 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x2500}) 14:37:04 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000080)={0x38, 0x8, r0, 0x0, 0x7, 0xfc413, 0x29, &(0x7f0000000040)="27e7f0ef1445ee10eab1fad3ed431f2c96131fb869b8c140f0f46b1e4dc03bb17e14ba075596e286d9"}) accept$alg(r0, 0x0, 0x0) 14:37:04 executing program 1: bpf$MAP_CREATE(0x2200, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:04 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xb78, 0x4, 0x8}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:05 executing program 4: pipe2$9p(&(0x7f0000000000), 0x800) (async) socket(0x6, 0x0, 0x0) 14:37:05 executing program 3: bpf$MAP_CREATE(0x2200, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:05 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x4000}) 14:37:05 executing program 4: socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1404, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$CAPI_INSTALLED(r0, 0x80024322) 14:37:05 executing program 3: bpf$MAP_CREATE(0x2300, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:05 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000080)={0x38, 0x8, r0, 0x0, 0x7, 0xfc413, 0x29, &(0x7f0000000040)="27e7f0ef1445ee10eab1fad3ed431f2c96131fb869b8c140f0f46b1e4dc03bb17e14ba075596e286d9"}) accept$alg(r0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000080)={0x38, 0x8, r0, 0x0, 0x7, 0xfc413, 0x29, &(0x7f0000000040)="27e7f0ef1445ee10eab1fad3ed431f2c96131fb869b8c140f0f46b1e4dc03bb17e14ba075596e286d9"}) (async) accept$alg(r0, 0x0, 0x0) (async) 14:37:05 executing program 1: bpf$MAP_CREATE(0x2300, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:05 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:05 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x5c00}) 14:37:05 executing program 4: socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1404, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$CAPI_INSTALLED(r0, 0x80024322) (async) ioctl$CAPI_INSTALLED(r0, 0x80024322) 14:37:05 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:05 executing program 1: bpf$MAP_CREATE(0x1000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:05 executing program 3: bpf$MAP_CREATE(0x1000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:06 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) (rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000080)={0x38, 0x8, r0, 0x0, 0x7, 0xfc413, 0x29, &(0x7f0000000040)="27e7f0ef1445ee10eab1fad3ed431f2c96131fb869b8c140f0f46b1e4dc03bb17e14ba075596e286d9"}) (async) accept$alg(r0, 0x0, 0x0) 14:37:06 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x60ff}) 14:37:06 executing program 4: socket(0x6, 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1404, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$CAPI_INSTALLED(r0, 0x80024322) 14:37:06 executing program 1: bpf$MAP_CREATE(0x2000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:06 executing program 3: bpf$MAP_CREATE(0x2000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:06 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:06 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x1000000}) 14:37:06 executing program 3: bpf$MAP_CREATE(0x3000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:06 executing program 4: write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "2c0cab", "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"}}, 0x110) socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x2}}, 0x18) 14:37:06 executing program 1: bpf$MAP_CREATE(0x3000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:06 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:06 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x2000000}) 14:37:06 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x100, 0x12) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 14:37:07 executing program 1: bpf$MAP_CREATE(0x4000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:07 executing program 4: write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "2c0cab", "bfb232fd5042e88dfa10f3b1e896bffe7e41edef9537e950e5633995cc905954592e760ac032005f29e2f97f2ff4f8be359185f6c07a3710f8d26ab929be6df0315bcff77a173edcd89cf3b6481944397d73df67b2690c73b7e3f2e747c35f1c203c5295dd4dc3d9d128c8ceb7e90340592fa962297154990baa5f2e4370a1c3d1bf60d154bb937fd0aaa1b9bb2b2e12758d3e97732892e4b095394f3e6b8a230949a52a4b06b79b59ae041d8daf958991b4092f761d6aa7fb7302cafa31d3ab68b7fcac7b750a03998e9fc935ebad4a17b49dc83407fbeb13f6c3db34c5388adc3a93bf9a50c12796e5a9a3c755179723585d1437286ab6fdd2d2d6837b9243"}}, 0x110) (async) socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x2}}, 0x18) 14:37:07 executing program 3: bpf$MAP_CREATE(0x4000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:07 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:07 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x3000000}) 14:37:07 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x100, 0x12) (async) write$cgroup_int(r0, &(0x7f00000000c0)=0x100, 0x12) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 14:37:07 executing program 1: bpf$MAP_CREATE(0x5000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:07 executing program 4: write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "2c0cab", "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"}}, 0x110) socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "2c0cab", "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"}}, 0x110) (async) socket(0x6, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x2}}, 0x18) (async) 14:37:07 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x4000000}) 14:37:07 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:07 executing program 3: bpf$MAP_CREATE(0x5000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:07 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x100, 0x12) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 14:37:07 executing program 1: bpf$MAP_CREATE(0x6000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:08 executing program 4: r0 = socket(0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 14:37:08 executing program 3: bpf$MAP_CREATE(0x6000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:08 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x5000000}) 14:37:08 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:08 executing program 1: bpf$MAP_CREATE(0x7000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:08 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x428280, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x9, 0x2, 0x38f, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x10, 0xff, 0x8}}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) accept$alg(r1, 0x0, 0x0) 14:37:08 executing program 3: bpf$MAP_CREATE(0x7000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:08 executing program 4: r0 = socket(0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) socket(0x23, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async) 14:37:08 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x6000000}) 14:37:08 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:08 executing program 1: bpf$MAP_CREATE(0x8000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:08 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x428280, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x9, 0x2, 0x38f, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x10, 0xff, 0x8}}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) accept$alg(r1, 0x0, 0x0) 14:37:08 executing program 3: bpf$MAP_CREATE(0x8000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:09 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x428280, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x428280, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x9, 0x2, 0x38f, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x10, 0xff, 0x8}}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) accept$alg(r1, 0x0, 0x0) (async) accept$alg(r1, 0x0, 0x0) 14:37:09 executing program 4: r0 = socket(0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 14:37:09 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x7000000}) 14:37:09 executing program 1: bpf$MAP_CREATE(0x9000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:09 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000002c0)={0x20, 0x3, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:09 executing program 3: bpf$MAP_CREATE(0x9000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:09 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x8000000}) 14:37:09 executing program 4: socket(0x3, 0x4, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "46c6a4", "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"}}, 0x110) 14:37:09 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x2, 0x1, 'client0\x00', 0x80000002, "8afbe11c3ae91e11", "4be68a15d45123900de60ac10e1483740e4be7c258bc39b11067461c3861e00c", 0x400, 0x103}) 14:37:09 executing program 1: bpf$MAP_CREATE(0xa000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:09 executing program 3: bpf$MAP_CREATE(0xa000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:09 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 14:37:09 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x2, 0x1, 'client0\x00', 0x80000002, "8afbe11c3ae91e11", "4be68a15d45123900de60ac10e1483740e4be7c258bc39b11067461c3861e00c", 0x400, 0x103}) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x2, 0x1, 'client0\x00', 0x80000002, "8afbe11c3ae91e11", "4be68a15d45123900de60ac10e1483740e4be7c258bc39b11067461c3861e00c", 0x400, 0x103}) (async) 14:37:09 executing program 4: socket(0x3, 0x4, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "46c6a4", "df93f2577df7345d482c394b3e3fecf559c0d063bfc6192012a3701ebf610160725095ed4e2b779f38a2fa70d121eed81724bac8105b056ce2b4d4a33244bb6920309f905beca31b82044be9e74b495b44badda55f6a7324981b6f52bd6cfc0a02a96c12ae750ef1f10416a02bd8975807a0a499bb2bed46791c5f4a61ddcc34e557d56fa4adc5c9bcc5b386236eee18f475551c4aae48322404e4f9b5cfa0a2512128a6396a44c8e3f54fe23518d214a818f2edd65b7bd20d95feff2e3a78ea4ac0cf18497ffedc9c9dd06bb5c813a37c1fdf4577b0d52b4677abf95e6b7181590b207cc45aef9d2097624f90a506ee65b8b4332caa3388b1a7a3e9601541a0"}}, 0x110) 14:37:09 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x9000000}) 14:37:10 executing program 1: bpf$MAP_CREATE(0xb000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:10 executing program 3: bpf$MAP_CREATE(0xb000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:10 executing program 4: socket(0x3, 0x4, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "46c6a4", "df93f2577df7345d482c394b3e3fecf559c0d063bfc6192012a3701ebf610160725095ed4e2b779f38a2fa70d121eed81724bac8105b056ce2b4d4a33244bb6920309f905beca31b82044be9e74b495b44badda55f6a7324981b6f52bd6cfc0a02a96c12ae750ef1f10416a02bd8975807a0a499bb2bed46791c5f4a61ddcc34e557d56fa4adc5c9bcc5b386236eee18f475551c4aae48322404e4f9b5cfa0a2512128a6396a44c8e3f54fe23518d214a818f2edd65b7bd20d95feff2e3a78ea4ac0cf18497ffedc9c9dd06bb5c813a37c1fdf4577b0d52b4677abf95e6b7181590b207cc45aef9d2097624f90a506ee65b8b4332caa3388b1a7a3e9601541a0"}}, 0x110) 14:37:10 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 14:37:10 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) (rerun: 64) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x2, 0x1, 'client0\x00', 0x80000002, "8afbe11c3ae91e11", "4be68a15d45123900de60ac10e1483740e4be7c258bc39b11067461c3861e00c", 0x400, 0x103}) 14:37:10 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xa000000}) 14:37:10 executing program 1: bpf$MAP_CREATE(0xc000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:10 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 14:37:10 executing program 3: bpf$MAP_CREATE(0xc000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:10 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xb000000}) 14:37:10 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:37:10 executing program 4: socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140b, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x40800) 14:37:10 executing program 1: bpf$MAP_CREATE(0xd000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:11 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x0, &(0x7f00000001c0)="013e68f2ad76083505c19bbca60e1485df15a78f92e006644c19f93fd40c5b1bd9cdf02d41945b3d1350b35baa04840c0b66beae4e4cec8be647c7cd981b061585ad8e20ebf8f2a77409a0006f741d05f8f95280412ebdff1a53ec1c834b902ef10b891e89f44b6144f5148ef0c4db4fa09dc7116eab5578d438d3d4cd028f3bed1cbdaa7de0892c4bef651e2b1a10e987688021576baefcd217cd3a0601f1dca6bf520c5ce29fe86456a63a6d31ad6106674aa41da4204a2fc8e1c6f75c6ed6ef7dede0792e32ab6dda85531b542b6ad216e53e56257e9589bc41d2ec", 0x7, 0x8000}) 14:37:11 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xc000000}) 14:37:11 executing program 3: bpf$MAP_CREATE(0xd000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:11 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) socket$alg(0x26, 0x5, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:37:11 executing program 4: socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140b, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x40800) socket(0x6, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140b, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x40800) (async) 14:37:11 executing program 1: bpf$MAP_CREATE(0xe000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:11 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x0, 0x0, 0x7, 0x8000}) 14:37:11 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xd000000}) 14:37:11 executing program 3: bpf$MAP_CREATE(0xe000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:11 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:37:11 executing program 4: socket(0x6, 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140b, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x40800) 14:37:11 executing program 1: bpf$MAP_CREATE(0xf000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:11 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x0, 0x0, 0x0, 0x8000}) 14:37:12 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xe000000}) 14:37:12 executing program 3: bpf$MAP_CREATE(0xf000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:12 executing program 5: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x1, 0xfe, {0xfe, 0x10, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xe, 0x2d, "883710cc87c87e62ab139821ff8d22aac1d6c6a084db1b3856a5c50290b6d4d90652faac4bf7932e0f66c9f830"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8e}, &(0x7f0000000280)={0x20, 0x81, 0x3, "3dfb9d"}, &(0x7f0000000440)={0x20, 0x82, 0x3, "c29ae8"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "37419e"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "8e6c92"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "c3deb2"}}) socket$l2tp(0x2, 0x2, 0x73) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:37:12 executing program 1: bpf$MAP_CREATE(0x10000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:12 executing program 4: socket(0x6, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) 14:37:12 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000002c0)={0x20, 0x0, 0x0}) 14:37:12 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x10000000}) 14:37:12 executing program 3: bpf$MAP_CREATE(0x10000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:12 executing program 1: bpf$MAP_CREATE(0x11000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:12 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 14:37:12 executing program 4: socket(0x6, 0x0, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) (rerun: 64) 14:37:12 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x11000000}) 14:37:13 executing program 3: bpf$MAP_CREATE(0x11000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:13 executing program 5: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x1, 0xfe, {0xfe, 0x10, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xe, 0x2d, "883710cc87c87e62ab139821ff8d22aac1d6c6a084db1b3856a5c50290b6d4d90652faac4bf7932e0f66c9f830"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8e}, &(0x7f0000000280)={0x20, 0x81, 0x3, "3dfb9d"}, &(0x7f0000000440)={0x20, 0x82, 0x3, "c29ae8"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "37419e"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "8e6c92"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "c3deb2"}}) socket$l2tp(0x2, 0x2, 0x73) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x1, 0xfe, {0xfe, 0x10, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xe, 0x2d, "883710cc87c87e62ab139821ff8d22aac1d6c6a084db1b3856a5c50290b6d4d90652faac4bf7932e0f66c9f830"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8e}, &(0x7f0000000280)={0x20, 0x81, 0x3, "3dfb9d"}, &(0x7f0000000440)={0x20, 0x82, 0x3, "c29ae8"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "37419e"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "8e6c92"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "c3deb2"}}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) 14:37:13 executing program 1: bpf$MAP_CREATE(0x12000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:13 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 14:37:13 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x12000000}) 14:37:13 executing program 4: socket(0x6, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) 14:37:13 executing program 3: bpf$MAP_CREATE(0x12000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:13 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 14:37:13 executing program 1: bpf$MAP_CREATE(0x13000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:13 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x25000000}) 14:37:13 executing program 3: bpf$MAP_CREATE(0x13000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:14 executing program 4: socket(0x10, 0x5, 0x8) 14:37:14 executing program 1: bpf$MAP_CREATE(0x14000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:14 executing program 5: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x1, 0xfe, {0xfe, 0x10, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xe, 0x2d, "883710cc87c87e62ab139821ff8d22aac1d6c6a084db1b3856a5c50290b6d4d90652faac4bf7932e0f66c9f830"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8e}, &(0x7f0000000280)={0x20, 0x81, 0x3, "3dfb9d"}, &(0x7f0000000440)={0x20, 0x82, 0x3, "c29ae8"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "37419e"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "8e6c92"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "c3deb2"}}) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:37:14 executing program 2: ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) 14:37:14 executing program 3: bpf$MAP_CREATE(0x14000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:14 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x40000000}) 14:37:14 executing program 4: socket(0x10, 0x5, 0x8) socket(0x10, 0x5, 0x8) (async) 14:37:14 executing program 1: bpf$MAP_CREATE(0x15000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:14 executing program 2: ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) 14:37:14 executing program 3: bpf$MAP_CREATE(0x15000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:14 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x5c000000}) 14:37:14 executing program 4: socket(0x10, 0x5, 0x8) 14:37:14 executing program 1: bpf$MAP_CREATE(0x16000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:15 executing program 2: ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) 14:37:15 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x1, 0x74, {0x74, 0xd, "89d4ac3cd0d2948bdde12271e06637caa28aefeb49551cda63b553230750937836607517e7f7a3648a2ebe264a0a75dd248c86f864ff817fc592559d9a649c1e2d8dbea8e9b551fbae53b88e203f0976089af1f1a695935529288b0b5b129037d24776c64d4a211045be7f63d643c8ea453e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x10, 0x3b, "56c8613b1f022196593470b45cb6fd2c813a64104aee2be04d5f0f62a3213b6053b251058f0c91291d7cfb6e64e81f7b59d27ff86727e18f6ae478"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x8, 0x1, 0x10000, 0x7, 0x18f7, 0x9, 0xff, 0x4, 0x8e, 0x8, 0xa0c, 0x76}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[r0, r1, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x81], 0x80, 0x6, 0x1}) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:37:15 executing program 3: bpf$MAP_CREATE(0x16000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:15 executing program 4: ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) socket(0x6, 0x5, 0x0) 14:37:15 executing program 1: bpf$MAP_CREATE(0x17000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:15 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xff600000}) 14:37:15 executing program 3: bpf$MAP_CREATE(0x17000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:15 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 14:37:15 executing program 1: bpf$MAP_CREATE(0x18000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:15 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xffffff7f}) 14:37:15 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 14:37:15 executing program 4: ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) socket(0x6, 0x5, 0x0) 14:37:15 executing program 3: bpf$MAP_CREATE(0x18000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:15 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x1, 0x74, {0x74, 0xd, "89d4ac3cd0d2948bdde12271e06637caa28aefeb49551cda63b553230750937836607517e7f7a3648a2ebe264a0a75dd248c86f864ff817fc592559d9a649c1e2d8dbea8e9b551fbae53b88e203f0976089af1f1a695935529288b0b5b129037d24776c64d4a211045be7f63d643c8ea453e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x10, 0x3b, "56c8613b1f022196593470b45cb6fd2c813a64104aee2be04d5f0f62a3213b6053b251058f0c91291d7cfb6e64e81f7b59d27ff86727e18f6ae478"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x8, 0x1, 0x10000, 0x7, 0x18f7, 0x9, 0xff, 0x4, 0x8e, 0x8, 0xa0c, 0x76}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[r0, r1, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x81], 0x80, 0x6, 0x1}) (async, rerun: 64) accept$alg(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) 14:37:15 executing program 1: bpf$MAP_CREATE(0x19000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:16 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x400000000}) 14:37:16 executing program 4: ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) socket(0x6, 0x5, 0x0) (async) socket(0x6, 0x5, 0x0) 14:37:16 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 14:37:16 executing program 1: bpf$MAP_CREATE(0x1a000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:16 executing program 3: bpf$MAP_CREATE(0x19000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:16 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x60ffffffffff}) 14:37:16 executing program 4: ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000000)={0x8}) socket(0x6, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x5, 0x0, &(0x7f0000000040)=[{0x3, 0x4}, {0x6, 0x401}, {0x0, 0x4}, {0x7, 0x4}, {0x1000, 0x2}]}) 14:37:16 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) 14:37:16 executing program 1: bpf$MAP_CREATE(0x1b000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:16 executing program 3: bpf$MAP_CREATE(0x1a000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:17 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x1000000000000}) 14:37:17 executing program 4: ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000000)={0x8}) (async) socket(0x6, 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x5, 0x0, &(0x7f0000000040)=[{0x3, 0x4}, {0x6, 0x401}, {0x0, 0x4}, {0x7, 0x4}, {0x1000, 0x2}]}) 14:37:17 executing program 3: bpf$MAP_CREATE(0x1b000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:17 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x1, 0x74, {0x74, 0xd, "89d4ac3cd0d2948bdde12271e06637caa28aefeb49551cda63b553230750937836607517e7f7a3648a2ebe264a0a75dd248c86f864ff817fc592559d9a649c1e2d8dbea8e9b551fbae53b88e203f0976089af1f1a695935529288b0b5b129037d24776c64d4a211045be7f63d643c8ea453e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x10, 0x3b, "56c8613b1f022196593470b45cb6fd2c813a64104aee2be04d5f0f62a3213b6053b251058f0c91291d7cfb6e64e81f7b59d27ff86727e18f6ae478"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x8, 0x1, 0x10000, 0x7, 0x18f7, 0x9, 0xff, 0x4, 0x8e, 0x8, 0xa0c, 0x76}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x1, 0x74, {0x74, 0xd, "89d4ac3cd0d2948bdde12271e06637caa28aefeb49551cda63b553230750937836607517e7f7a3648a2ebe264a0a75dd248c86f864ff817fc592559d9a649c1e2d8dbea8e9b551fbae53b88e203f0976089af1f1a695935529288b0b5b129037d24776c64d4a211045be7f63d643c8ea453e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x10, 0x3b, "56c8613b1f022196593470b45cb6fd2c813a64104aee2be04d5f0f62a3213b6053b251058f0c91291d7cfb6e64e81f7b59d27ff86727e18f6ae478"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x8, 0x1, 0x10000, 0x7, 0x18f7, 0x9, 0xff, 0x4, 0x8e, 0x8, 0xa0c, 0x76}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[r0, r1, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x81], 0x80, 0x6, 0x1}) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:37:17 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) 14:37:17 executing program 1: bpf$MAP_CREATE(0x1c000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:17 executing program 4: ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000000)={0x8}) socket(0x6, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x5, 0x0, &(0x7f0000000040)=[{0x3, 0x4}, {0x6, 0x401}, {0x0, 0x4}, {0x7, 0x4}, {0x1000, 0x2}]}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000000)={0x8}) (async) socket(0x6, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x5, 0x0, &(0x7f0000000040)=[{0x3, 0x4}, {0x6, 0x401}, {0x0, 0x4}, {0x7, 0x4}, {0x1000, 0x2}]}) (async) 14:37:17 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x100000000000000}) 14:37:17 executing program 3: bpf$MAP_CREATE(0x1c000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:17 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) 14:37:17 executing program 1: bpf$MAP_CREATE(0x1d000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:17 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x200000000000000}) 14:37:17 executing program 3: bpf$MAP_CREATE(0x1d000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:17 executing program 2: pipe2$9p(&(0x7f0000000000), 0x800) socket(0x6, 0x0, 0x0) 14:37:17 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmmsg$alg(r0, &(0x7f0000007080)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="6d97afbe104e89ff52379ea1edb3becfdd79a14e63a8a28b3895fcc1915dafceb555e267a330fc4f197b83514c4cfe884a93dbf30e942d5cb414fc8a83800768f4c2cd321b2e48c42ceaa06cf1328216ea8debd29f01719839236ff3cbaac5fcfc84369f19cd5ae8c0bd76f8f90eb4bb95368d35241ab592f13c8de2c8c833fee7c46b1fbe2d748e1fa47d1e2fd3b8a558e96c862e60e56794ae37a2a0b8630df0b08451962d7e361b68ab16e73fdd9184901a35ea610e69e200ead95410375f4ba76381b1f2a59e659952bd9cce", 0xce}], 0x2, &(0x7f0000000240)=[@iv={0xa0, 0x117, 0x2, 0x8b, "8031ca3b3dc5d7e74523b1f3e54334c032c53cd8f9b2096c837a554b457f4594fcc254c80bfbe4e63d8634d715b894d075075e748843aa1c8dbf4e47f8e0c4100fdd18338d400dbb4f19140060abb939ebb783142576ec249b44da2888cde49170b908ececa4a77282c61eb8a7bdcd55ab0fb1b174211fb8160c17304a5f6af359458089ec0e5338c64b7d"}, @iv={0x40, 0x117, 0x2, 0x2a, "d28ab5245fff81ad5cbff3a0792463431ce70c2a5065bf71dd219bab7c835ae1a428cb4604bde1fcacd5"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x10f8, 0x4000}, {0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001380)=[@iv={0x60, 0x117, 0x2, 0x4b, "37a906cba918ed8c0527ca9a22a38848475866a86bca4eb95c48c422c0b680faeb222c0db9fcd44a4128dec737f47624a0e4faabcdf489f38ebfc3308f670e85ac5ce6b09b05a2f257387e"}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @assoc={0x18, 0x117, 0x4, 0x1}], 0xa8, 0x400}, {0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="75cebc6c2a54bd60ec7754b3ac7547ee16b3e92b2d3a032d93d36c9d866d26c86aeace27732fcc8930b5909a404ae0457d7a00d95201ad828c9df8d1b6178bf290d2324aca308027b6ff5c2f1bde32e09ea1f87fe6f6f7b15249d522ba0acb62a98a39d507c59167851dd240bab9e14e27dd5ccd79082c793210348f621624f45cf6c19dca", 0x85}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000004500)="cc39155507eca285be77bd4b0a4880ec2bae5797d0a37bcbec3b517993ff7177f7c6b1b0366e8545a73e9d7bd39796d7f4f9341bfb89c8ae8e4e9348af3371fed4869bb084f33f3359fbc73c2f59f53a3a2161187d3dc5f75bdd3eda211d8c0f88036e3635670e2da6b4cca82e8d5c334237f8b38d7d466df642c7d34ff70211167d87cf81b225e09d8a9e5af6f79fc1d20719f97c066f55dc759d4cd5420f2b0a0a6a5c53e5d430a662a44e384ffbe0fbb05a715935349869ec526cb9788cc17eb93f", 0xc3}, {&(0x7f0000004600)="79a25f3f4b897b0a2908603bfa29bd22939dc0", 0x13}, {&(0x7f0000004640)="8b02c6cfe13dcc6843f654ef31ee22b3afb0db11c3ddff9e2a2cdebc6e043f4c353d178097ca0cd718d305f37f21d634f37d5e8542314a9af3d9b6d241c0d58857227094b44fff20afcec1c9cfb365bef07e9377df065d53e05934bf66dc826a591c37d890ebce556826b79b889609f412b811166021aee04f073e1d99f3119e0dc03fc5764e0fefccd6563a2df875fb7901b5e6d6dc32876e361cc7bc0567025aaa7eb81c6c0bd8e5d09626358d5588709c1975c4f2a9f4e69f1368435ef8f9f1434615b82455bd7df5d7a309a64da5a618", 0xd2}, {&(0x7f0000004740)="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", 0x1000}, {&(0x7f0000005740)="c404eb474c7abdcf88f688756eb6f6bfaadcf43f8f40a34db9aa1a837ccca2e7e5d057227f3a0dd1f47298e52fac5adbad5afb8dd3a990282490551c383aaea9f41e32364c33ff002f14923736d23f5f89efc910a3ea522b4567511063f9f6c511272af68694ad126e92cebb557010bbefdf7d52226b253962c6763f9a81b980cca89622bddc6417a2fa498774a0510fdc29ccdb33b951cce3", 0x99}], 0x9, &(0x7f00000058c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0xa6}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc0, 0x117, 0x2, 0xab, "11e5bbc80e72550a51b374c2820281aa6f061b294a7edbcf4369465994eae27a79c404d992ef8d7bc457c9b47b5708e9ee72d23e869bd40ddb88cf0926d184579b324a6efd9e4547b850f427c37196e7269e7b3408a8d1d5f70a72dfca07019ef856d5061021da9884319639b4082c04ad106f28317fcc89a0846a83e90c945bcb5e923a6b7bbabc1aa8ab82f82ef9732e775ed7afe9c61c3a39c336f399f0ba1ba2c4d312ab749c7d9475"}, @assoc={0x18, 0x117, 0x4, 0x3e93b482}, @op={0x18}, @op={0x18}, @iv={0x18, 0x117, 0x2, 0x3, "a65458"}], 0x168, 0x4000000}, {0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000005a40)="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", 0xfb}, {&(0x7f0000005b40)="a158114b82e061298d08c4c1ef19", 0xe}], 0x2, &(0x7f0000005bc0)=[@iv={0x68, 0x117, 0x2, 0x50, "b61287f21916221c0891148790e86ca371da26206a36f886b870c687372d674d6d8f0e5d3583b5a4bb9f9594521f4441cf7c7b7842b330629f79ae81842a059ec9e18158c2f1e0bf19a9344c0eafa048"}, @assoc={0x18, 0x117, 0x4, 0x6054214}, @op={0x18, 0x117, 0x3, 0x1}], 0x98, 0x8080}, {0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000005c80)="7d3ba0abfca38c852acbc3a1909cb59c15e7188c2c4fc990a2bf036acacc62157647742f79e4314dbf77a30d924b282f97077e0dcf1b34bb905899980ea301f22daace49606d315c5a101c66415fb8b8", 0x50}, {&(0x7f0000005d00)="2c6137636184e414494209ec37a7ce369be721b442971f5acf0ff61ac2d1569632d76d2da37d33262fa826ff75528112e350313005cb5821a952a4b995a2fd236fdebc4bdce44a226c6d7212351e5f", 0x4f}, {&(0x7f0000005d80)="8dc170b835515be03f84ad784b030e6744ecd19506b48cfc1f424e66d9a7252f1ea5e4679a28b88ae25b1d4d7b22ea95271511a31e739d10e9b7a47d470d6d9593d60624c2c23724f746fe867bd3476eba387b99419081c517ea9e36ae5a926df869f8d3d9f5513a81926f6ac884877a6276ade7d215cb3f5732ff24618e8ee84baff4fa223f2ce5960e691f9d229524953445e776f23e1b1ae090506d9a3e98727ce77a24ffd2927616c5f49eed07534fbefdd6d7399fc05daef4bff481d6e77e8519143b3a1e2a55fe883ccf2bf182b5045da23a6a4c6354aba6c71921d9d5a3700a77be7916b5434bbf55290f408e11b83446a9ca763b396d71499c14edd6a2fce938dd9704963283f9441acb6c1a49520bd27dd268ab9b0f3c4b544d6b2be9e887749218a1d76945bfb239b9af24b51c73658c82498713f0fc755ec7a5cbf651a21a67df63b6170ea3f57398c37f1c85ef1d46dfcbc8387fd7e7f21e442195daa3b292c749f18c9f22cc9efcc7227b559f7b897db1f0cf15e58fae095304f6dab8601735b545edd8b62a29ff58706aa371e6dbe258d61ae21d19c0e5bc927dc92754cbb5e27a7ab351213e1e61b774e1c18525c0b12308c79301954aeaaadfd4e9c89979c93c75fac3dbd780ae25b00f28d918a604eb8d6b75cfb0ffa4d5b403c3d44547fc988b8343ad4627f0f40a5f0162115687b9b735786a247370aec06e124563100cd5f3f1ba8299c87625390380ce4c27da0e82692ac77ab6b28ecf8ce92a2c4ce15ec55de092e28725d9588c65bb9bc1c0c7d6de9840c41d09e155bae8cb8635d5ee40a892f999cea66216d336ec3dd44dd5c94c2d0275e14750408d3e246ea2bf0a4de6f722eb0186890e6670aa671fc36934da05fb73c32be6c760bd39a34108934bec6361b2999f7b19077ed7d4b4459efc9156fe379795eb4670c834a81207501c186899ec085476cbf86268e44c7bf96519ea007bd08c59206db59a7a76fa33b677315b861dc44c208cbcbbde65b8206e751f246a6669fad4a4094a18448c9afaf78b12f246233a0afaeb39c7846317781bd4b04784bf6271f2da2662e3e8fed07c2a16572bc6bf6dbd45ea7e02d06a84e7b0ae036faff5aa5318bc086b51300d0ba5faf36b3868922c2e249479af350a6b25fab3bb5cc94963042334b17703129634c25005ab1b998a009196fd700f5cb1f22e0e87a4485e000b1384426a7f58c29148cee2fc90a34c60bbf7d64d5b1989324c70562c6f7296db02c308f62caef38c3fb522e8e0023ac649bcedc81c834862c129576496ccbb22e5b7376b5cad9f87c996fa16b271358e0f1474db3fcff3ff5bb8312ae9506fabf52f2e3e079887e588fc43f208afbfe93f182c66ca489b06e065d921ba26d9edd4f093aaa5f9259f4924c2d7d39e468ae42d711aa67d18104bf8aed9a103314eb6efa9fedecbca3c12cfa83b34443277ffe61407f1c5647ebf6142d5a6945685de64473e456447c3882fb2945f04d22c30620d56df9b82db56f99841ed6c5601746c91113ab94d196b21a3b066294bc6167abc6a2e398b005835c0b46c8aaccf63a2a3d3640017348bf784acde4cdfce583b5e50ede982890cfe8070cc1c8c768c07d83513b9f91b15d3962f85fcd75276c483d0cd0b4733515cbf043e9beb064c7f92dc09c51641fc90cfba7b6902a85fba040d34a9daa2fdabde4b573faf5afcb2d47e2826c616ea5c3ebb3850c1191214f39773e19e82584b2829ba686df98c8121c0b2b7abfdb87904553bc2a4b1c1883632a6374f23d7e0baae1e44667a33f734c136bee5b1fd534c24a49a669933036aa363f7b5cbb8e35b025ca1facdf276e147be69f7c004dd258ef633511263431c68acbb836c2eef99ac69040d1d4474efa751d62695ce9c1dd24be75790c9f8cfa989558efd61f0e1062158047128f962ba3bab63a25884fc802129cf974d66720d574bb1c638fba6795731649bd7c38d8e5ef98f7d7c7837e803f94bb10b06b70e3f7fdef3cfd02f6079e801fb86273c87e3644009835708da9dc89c7d9d4aefa138bbb74450843417187b74162da2248466f63a2270dfa86eeea49f6a51d2ff2f98b25912864089ae2dcf2bc4dc1b0b1f46666edd377b34092cf52eb6b67a4a3d44fa1a6d2610dd9a21f6e48a68f9f492df46be19bad2f76c1f54d2768ea8d274902abe41692f7d367513455bc96142723ceadc3dc7fcd663b21c8a39e51eddab8f5970d725deffe0b5d0202502f7eec162d15bcc91f0c76c4aaf8ff24ab58e952469e6728d7c75bed57d350e7f72f6ad745492a1cc0a2c154a54d004583c0154809f2923039a5aa21577afaefb95a4b8729f0f3af5ea8f067e2a5e94fee41a6c2ae0d4e57614b9245459fbbf1d9d17f1c88d9849157281968ac4af177543926ac16e65993f440b74654a97001f401d53a14fef433bd4301363f849cd528cf2116ee9804720f050758b7b1a2c722a0713e892cd6ee61d700eab0521a28860ebd82a8e9ac039f67f72a418fc7b35485653035a3c17fdf5ca5804249f44446d07293cbae8bbc5981d4faccfafce286226fb9a5740a99da8eab686362d576fbcf9b553da6d3489f02690cb1f1517bb06df8f633b5729502a333aa25a82e2ae392994f8b2f532ad4c9fe6b1b12ac2e97f77c5540a1ae4c6daa11a583b176812e9155aa4291f4b84280c88b74421c27a3983bfbd775f2d00292951d6668912f217fe5074f50c3d298e97f90a8c48a308ed8b6c425176a38293e7050bace9c4b7ed46a047568bfa3af679a3ef8e35d711d8fdce152410bd1d3bc52c9e35e1e466924d759f5215273ee24e8845c7932090df1b510afd66fdbf58d9546ed62d263229394792c6859d3f157de9f7ac00a7cac4e8ce3d6a981d1742d11d3a419599c525e98e0eba9f8c9b320ce3d3793bcce669f16d2077dc599b6d070cf34c3901a12892beadf46ac7e927561885b2fa09727adc401cc2b7a4afbdf95386fad6cc920544238a7da87d392dc5553187e5eadca3cc09dbb7cbaf04a4b8bf3b8327b86abcf307ef124b84134310172e9d97e0ca545b51458166e7475a8bbfa4427e07e157e513192d4e850c0009de21f78c8c0ae0d96022cfc29e2ef1fbe1a9997e93589783b0d529c30320f852bc8241ba6937ae9abaf4daf75804660cc3f7bf928d14132c7e6d3e48135877dedaa44de3dc7a0a4abf15ae8d0b12cee9ccb2a35c9204ab4c4531dfe2dd12787c2eae6a964ac3491b01d42b109b0fc1ac07ada6c476ea5d2fa93da203d76222b73667d141b5d9e3798bdefefeda61cc4570db1d468d58d97b5f56a0befd4aece293880e78ac2ba93b7a507b6350e45a36011ea654836a5e5307ceb682f19b2f2f9e6b82750c14e858477dc794a6720485c97ad0cc2958e4cc08c3c473904822f4658eea52501b91b78e5e2fbbe92cfefa974e5bf5069dc40aaf2cb2b5efd76eeb57deba5a390dc0e7494e70569eaf3f3aac38a4d93ac63375d21217016feacdd7ac93d35c6812cf5cd7bbf00e89dec112aaf899a9cc534d093fe313257c8011eec30819820cc797d2eaf5cd6c483d81c9b5412e60d5f4785bbeb521ebb79aa9c7f358fb46657f90178f96a8826570f97e87da982f4e3709ea62585f254a9188649b95e37ed64fe82b44cd4e5f2113274f556b48b5a747275818def3253cbdaf548a386f3dd76d732b865dbc9d7d552341516ab534abd564f0ce41d618a36661432eae1f4e1f48522d907166d39a336c4c69df011b3a31fd7767011c5330d87fe75943b59db3934951ec7fa01d0ffe502ee7b1c8ebf478ae506582c9f7a51182177f4a4965688179042672e35765acd1c17151b486ec3f51e472c6f7ed90cc75956b341d8eb6dd923c5089dec70614a38d1230bb8cc72405d74cea067421cdefd940478f7a7421af9f4ec04afb6dd70bd0930687206364adabec1844527949475febaccdbb6ab6cdd87e8e78c01aa8958b708dd78e9ffc0240ecb85aaca35dc2b500c8950167fcd2c3df3c4fb729b19e4c5c5a287192e97c6698831661b899f201f4a24f2430b292e66dc76bfe380aa67c072e94014282b9b95d654099aff6d252efbc00fff7f5f066c4f9527228641269f1d47395387c78fc6a33753e35bdeaa3b33b20b6f51eaa89556500f7b4fc1eefc3768943f58d0ea9a88d3d9e67fce1e3b7f52a74179db429a1e1e619db00478435259fcccfc6d580d3dcf5d5f294dc702df3c6c09ad5979861395b9d6095523e0f3c0147e69aa99aff14fd6e102808081bfd830ba758dc93367ca6f0a020c787279c3c9617382c5ecb017639d2dbc263ae4e61c12e244cf6fa5d6ee201b983f4988f8607819d2b9feb9690e8aae880421e44e93fa06f59dafbdcc7e38a646f6dad9a726254b50611a7f362cc373aa0615575dd34392abc665c66f05e9f3962a74222022519a80e509c8fb32299e1d29ad40274f980d39a495005e8a50aa874592c87eb4e3701df53be241f9d03b1c8adffd55349e521a7bccab89397515c0d400ffbf1c8fd1c76c367498b3cb46451a92732b460b169b89406652abbf38b3d324d6c2ad54a7b8d826a78fa897f3d4375335473be1522f366f23ab08f095fe0464f2e0f01f2984dff9a7e8d8b76e07dab81c5d9b4da30ec961a9f320c6d6057f0bae3e8778456a84216ff734c01233746d17001a518913d53d1af59dbe6a49d34b463d44e008008bfbdf14bffaf774eef28b61d3ce513da7c29c95d96fc4e759373d9d0b064a646a5c40251e8b1793eb0b43d14e784035454d2f1eecfa3430a3368dc964099e6d5a87ea0b869a7e6994d530fde6ddbe6818ddf144fcdca2f6c4327ac9013f583138701aab18b02cd5e7422c288524b0ac5be900edc484ea1fe24082746e53361884040e01a4b30435e01e25e20217b8f03e48ad348c3475be058d7bc33f7e36b2215fa47ffdab1c6dd2cef4d6c21ca3ae1527cbdea23ee91a7354aa6eaac3a8d1e5e996879e64df302948170e4041f9d22a2659a75418894d040220b09cf41e9da9423583d99084e430ee6e458ff14387f4a23fc184f4c49a86c6c713dd16bed121130c6854c6fc314ca287b246f2398196af8198fab9401b55d2b29fe04d78faed99127386dbf05569090f7e57809413a7c216bf3f2087801654cf1d32c20b0622056482bc0ab66a6b982c99ec565e6ddcf05ed83ba222bda32dcd9175f0a06866c236ffcfab54b718b8711eb31824e5e0f64c98e3cf0723a0c0f9524dd07511b6cb1f2da1483ee03539ae55c800fefc8e4a6313eba8493eaa124e5833ac989e09f743df5e1a519f5b55a4bb5b4ca7db4731ae2ec0983251f0ab3da9ca322aa8ea0769b5aeed4b73fa60a9df0cfcee24ae8172cffca435a34128f7239e120966089ecf0d72aa6d93df873d66cba38fa7de1f94e1331244581917b10baa27ba2bbeac21e86978c90bedcc1e02f53f45f54054ce0568eab500964f8377c16087097b4e885a4058c11ac372304ded935c325c879c333a5cd17f51174786e69ceb283517c94b7f41640bfd3d64e96ebbe5d0334d0b0231164489a5b1d56179e456da59ac150ec3231711a03e9fa16fd73e482b0358006f9482adee56558c250d7c9f42312b5b13fb52e23ef49237ca8e05ca6ee5da0c27d578e226c303126f566e59847845e9be6a01ee03eb102525e204a16bfb4c40bc010125d1d61eb5fab38de04b61dcc6eefd7e29a42cc3c2de7ade7691fae52e4a98fd3dc47cd5183233156228bc83277300ea25b1670b0", 0x1000}, {&(0x7f0000006d80)="247beb5c34b41e86863115b4a7ce4f265b0f7728f829c5f7027170dee73185dd5df437a7ac41742933c50883ab8d6ae113beed6dc5c7a482aee48ad4dd3b9cb32a13fc4f5ec72d9a5c51ce432cd31fc210584920b75d3cf41126dbf6cc7883a14dfca74e94e3033dbeac2b44132002d9d0", 0x71}], 0x4, 0x0, 0x0, 0x2004c090}, {0x0, 0x0, &(0x7f0000006f40)=[{&(0x7f0000006e40)="fe9fbb6edc4ad0cc911246158e05a7bab7b79470e11c509c59437dfd3688606de4fe47a436cef68bdb44b59e340719be127b50bd17c8625d65a7b6392fb0bec00b829de52f4d1ce2fa97ee697fab085f6212eea9d7f1193539c9541a12886667989327762d29d19313f93ac9bc07ecfcc3f9437ffcf4ea5d3e51c3ef29521559387c3c8c61695c98cddace2a5a1502acea170c254b7b8b542f6bfd6bd3029a162c68d9d0a6737b5b4c2bfbd61a6d900afeb6c074fd0ebe5c3214b400ed26886d06d854c5a5af", 0xc6}], 0x1, &(0x7f0000006f80)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x98, 0x117, 0x2, 0x82, "75a2a1ebb06ff4255d38bfc5d42c7094fc9a6e0c746615612dd5bc1452e3a8e4dedd0bfa5258ceaccf13c02358568892e01ff24a0bc135b1b2e938d70b13bcddf4b02fe74bb39e7e1463c2aa45fabdfa778a6abe78080efa5c774dad5a9ac5b67e5965fb4e6d3cf981df76ef21394a2f2c7e39b82ec5d542e858ecba35a907ebe967"}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x1}], 0xe0, 0x40040c0}], 0x6, 0x8000) socket(0x6, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x1}}, 0x20) 14:37:18 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) accept$alg(r0, 0x0, 0x0) 14:37:18 executing program 1: bpf$MAP_CREATE(0x1e000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:18 executing program 2: pipe2$9p(&(0x7f0000000000), 0x800) socket(0x6, 0x0, 0x0) 14:37:18 executing program 1: bpf$MAP_CREATE(0x1f000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:18 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x300000000000000}) 14:37:18 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmmsg$alg(r0, &(0x7f0000007080)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="6d97afbe104e89ff52379ea1edb3becfdd79a14e63a8a28b3895fcc1915dafceb555e267a330fc4f197b83514c4cfe884a93dbf30e942d5cb414fc8a83800768f4c2cd321b2e48c42ceaa06cf1328216ea8debd29f01719839236ff3cbaac5fcfc84369f19cd5ae8c0bd76f8f90eb4bb95368d35241ab592f13c8de2c8c833fee7c46b1fbe2d748e1fa47d1e2fd3b8a558e96c862e60e56794ae37a2a0b8630df0b08451962d7e361b68ab16e73fdd9184901a35ea610e69e200ead95410375f4ba76381b1f2a59e659952bd9cce", 0xce}], 0x2, &(0x7f0000000240)=[@iv={0xa0, 0x117, 0x2, 0x8b, "8031ca3b3dc5d7e74523b1f3e54334c032c53cd8f9b2096c837a554b457f4594fcc254c80bfbe4e63d8634d715b894d075075e748843aa1c8dbf4e47f8e0c4100fdd18338d400dbb4f19140060abb939ebb783142576ec249b44da2888cde49170b908ececa4a77282c61eb8a7bdcd55ab0fb1b174211fb8160c17304a5f6af359458089ec0e5338c64b7d"}, @iv={0x40, 0x117, 0x2, 0x2a, "d28ab5245fff81ad5cbff3a0792463431ce70c2a5065bf71dd219bab7c835ae1a428cb4604bde1fcacd5"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x10f8, 0x4000}, {0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001380)=[@iv={0x60, 0x117, 0x2, 0x4b, "37a906cba918ed8c0527ca9a22a38848475866a86bca4eb95c48c422c0b680faeb222c0db9fcd44a4128dec737f47624a0e4faabcdf489f38ebfc3308f670e85ac5ce6b09b05a2f257387e"}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @assoc={0x18, 0x117, 0x4, 0x1}], 0xa8, 0x400}, {0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="75cebc6c2a54bd60ec7754b3ac7547ee16b3e92b2d3a032d93d36c9d866d26c86aeace27732fcc8930b5909a404ae0457d7a00d95201ad828c9df8d1b6178bf290d2324aca308027b6ff5c2f1bde32e09ea1f87fe6f6f7b15249d522ba0acb62a98a39d507c59167851dd240bab9e14e27dd5ccd79082c793210348f621624f45cf6c19dca", 0x85}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000004500)="cc39155507eca285be77bd4b0a4880ec2bae5797d0a37bcbec3b517993ff7177f7c6b1b0366e8545a73e9d7bd39796d7f4f9341bfb89c8ae8e4e9348af3371fed4869bb084f33f3359fbc73c2f59f53a3a2161187d3dc5f75bdd3eda211d8c0f88036e3635670e2da6b4cca82e8d5c334237f8b38d7d466df642c7d34ff70211167d87cf81b225e09d8a9e5af6f79fc1d20719f97c066f55dc759d4cd5420f2b0a0a6a5c53e5d430a662a44e384ffbe0fbb05a715935349869ec526cb9788cc17eb93f", 0xc3}, {&(0x7f0000004600)="79a25f3f4b897b0a2908603bfa29bd22939dc0", 0x13}, {&(0x7f0000004640)="8b02c6cfe13dcc6843f654ef31ee22b3afb0db11c3ddff9e2a2cdebc6e043f4c353d178097ca0cd718d305f37f21d634f37d5e8542314a9af3d9b6d241c0d58857227094b44fff20afcec1c9cfb365bef07e9377df065d53e05934bf66dc826a591c37d890ebce556826b79b889609f412b811166021aee04f073e1d99f3119e0dc03fc5764e0fefccd6563a2df875fb7901b5e6d6dc32876e361cc7bc0567025aaa7eb81c6c0bd8e5d09626358d5588709c1975c4f2a9f4e69f1368435ef8f9f1434615b82455bd7df5d7a309a64da5a618", 0xd2}, {&(0x7f0000004740)="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", 0x1000}, {&(0x7f0000005740)="c404eb474c7abdcf88f688756eb6f6bfaadcf43f8f40a34db9aa1a837ccca2e7e5d057227f3a0dd1f47298e52fac5adbad5afb8dd3a990282490551c383aaea9f41e32364c33ff002f14923736d23f5f89efc910a3ea522b4567511063f9f6c511272af68694ad126e92cebb557010bbefdf7d52226b253962c6763f9a81b980cca89622bddc6417a2fa498774a0510fdc29ccdb33b951cce3", 0x99}], 0x9, &(0x7f00000058c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0xa6}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc0, 0x117, 0x2, 0xab, "11e5bbc80e72550a51b374c2820281aa6f061b294a7edbcf4369465994eae27a79c404d992ef8d7bc457c9b47b5708e9ee72d23e869bd40ddb88cf0926d184579b324a6efd9e4547b850f427c37196e7269e7b3408a8d1d5f70a72dfca07019ef856d5061021da9884319639b4082c04ad106f28317fcc89a0846a83e90c945bcb5e923a6b7bbabc1aa8ab82f82ef9732e775ed7afe9c61c3a39c336f399f0ba1ba2c4d312ab749c7d9475"}, @assoc={0x18, 0x117, 0x4, 0x3e93b482}, @op={0x18}, @op={0x18}, @iv={0x18, 0x117, 0x2, 0x3, "a65458"}], 0x168, 0x4000000}, {0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000005a40)="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", 0xfb}, {&(0x7f0000005b40)="a158114b82e061298d08c4c1ef19", 0xe}], 0x2, &(0x7f0000005bc0)=[@iv={0x68, 0x117, 0x2, 0x50, "b61287f21916221c0891148790e86ca371da26206a36f886b870c687372d674d6d8f0e5d3583b5a4bb9f9594521f4441cf7c7b7842b330629f79ae81842a059ec9e18158c2f1e0bf19a9344c0eafa048"}, @assoc={0x18, 0x117, 0x4, 0x6054214}, @op={0x18, 0x117, 0x3, 0x1}], 0x98, 0x8080}, {0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000005c80)="7d3ba0abfca38c852acbc3a1909cb59c15e7188c2c4fc990a2bf036acacc62157647742f79e4314dbf77a30d924b282f97077e0dcf1b34bb905899980ea301f22daace49606d315c5a101c66415fb8b8", 0x50}, {&(0x7f0000005d00)="2c6137636184e414494209ec37a7ce369be721b442971f5acf0ff61ac2d1569632d76d2da37d33262fa826ff75528112e350313005cb5821a952a4b995a2fd236fdebc4bdce44a226c6d7212351e5f", 0x4f}, {&(0x7f0000005d80)="8dc170b835515be03f84ad784b030e6744ecd19506b48cfc1f424e66d9a7252f1ea5e4679a28b88ae25b1d4d7b22ea95271511a31e739d10e9b7a47d470d6d9593d60624c2c23724f746fe867bd3476eba387b99419081c517ea9e36ae5a926df869f8d3d9f5513a81926f6ac884877a6276ade7d215cb3f5732ff24618e8ee84baff4fa223f2ce5960e691f9d229524953445e776f23e1b1ae090506d9a3e98727ce77a24ffd2927616c5f49eed07534fbefdd6d7399fc05daef4bff481d6e77e8519143b3a1e2a55fe883ccf2bf182b5045da23a6a4c6354aba6c71921d9d5a3700a77be7916b5434bbf55290f408e11b83446a9ca763b396d71499c14edd6a2fce938dd9704963283f9441acb6c1a49520bd27dd268ab9b0f3c4b544d6b2be9e887749218a1d76945bfb239b9af24b51c73658c82498713f0fc755ec7a5cbf651a21a67df63b6170ea3f57398c37f1c85ef1d46dfcbc8387fd7e7f21e442195daa3b292c749f18c9f22cc9efcc7227b559f7b897db1f0cf15e58fae095304f6dab8601735b545edd8b62a29ff58706aa371e6dbe258d61ae21d19c0e5bc927dc92754cbb5e27a7ab351213e1e61b774e1c18525c0b12308c79301954aeaaadfd4e9c89979c93c75fac3dbd780ae25b00f28d918a604eb8d6b75cfb0ffa4d5b403c3d44547fc988b8343ad4627f0f40a5f0162115687b9b735786a247370aec06e124563100cd5f3f1ba8299c87625390380ce4c27da0e82692ac77ab6b28ecf8ce92a2c4ce15ec55de092e28725d9588c65bb9bc1c0c7d6de9840c41d09e155bae8cb8635d5ee40a892f999cea66216d336ec3dd44dd5c94c2d0275e14750408d3e246ea2bf0a4de6f722eb0186890e6670aa671fc36934da05fb73c32be6c760bd39a34108934bec6361b2999f7b19077ed7d4b4459efc9156fe379795eb4670c834a81207501c186899ec085476cbf86268e44c7bf96519ea007bd08c59206db59a7a76fa33b677315b861dc44c208cbcbbde65b8206e751f246a6669fad4a4094a18448c9afaf78b12f246233a0afaeb39c7846317781bd4b04784bf6271f2da2662e3e8fed07c2a16572bc6bf6dbd45ea7e02d06a84e7b0ae036faff5aa5318bc086b51300d0ba5faf36b3868922c2e249479af350a6b25fab3bb5cc94963042334b17703129634c25005ab1b998a009196fd700f5cb1f22e0e87a4485e000b1384426a7f58c29148cee2fc90a34c60bbf7d64d5b1989324c70562c6f7296db02c308f62caef38c3fb522e8e0023ac649bcedc81c834862c129576496ccbb22e5b7376b5cad9f87c996fa16b271358e0f1474db3fcff3ff5bb8312ae9506fabf52f2e3e079887e588fc43f208afbfe93f182c66ca489b06e065d921ba26d9edd4f093aaa5f9259f4924c2d7d39e468ae42d711aa67d18104bf8aed9a103314eb6efa9fedecbca3c12cfa83b34443277ffe61407f1c5647ebf6142d5a6945685de64473e456447c3882fb2945f04d22c30620d56df9b82db56f99841ed6c5601746c91113ab94d196b21a3b066294bc6167abc6a2e398b005835c0b46c8aaccf63a2a3d3640017348bf784acde4cdfce583b5e50ede982890cfe8070cc1c8c768c07d83513b9f91b15d3962f85fcd75276c483d0cd0b4733515cbf043e9beb064c7f92dc09c51641fc90cfba7b6902a85fba040d34a9daa2fdabde4b573faf5afcb2d47e2826c616ea5c3ebb3850c1191214f39773e19e82584b2829ba686df98c8121c0b2b7abfdb87904553bc2a4b1c1883632a6374f23d7e0baae1e44667a33f734c136bee5b1fd534c24a49a669933036aa363f7b5cbb8e35b025ca1facdf276e147be69f7c004dd258ef633511263431c68acbb836c2eef99ac69040d1d4474efa751d62695ce9c1dd24be75790c9f8cfa989558efd61f0e1062158047128f962ba3bab63a25884fc802129cf974d66720d574bb1c638fba6795731649bd7c38d8e5ef98f7d7c7837e803f94bb10b06b70e3f7fdef3cfd02f6079e801fb86273c87e3644009835708da9dc89c7d9d4aefa138bbb74450843417187b74162da2248466f63a2270dfa86eeea49f6a51d2ff2f98b25912864089ae2dcf2bc4dc1b0b1f46666edd377b34092cf52eb6b67a4a3d44fa1a6d2610dd9a21f6e48a68f9f492df46be19bad2f76c1f54d2768ea8d274902abe41692f7d367513455bc96142723ceadc3dc7fcd663b21c8a39e51eddab8f5970d725deffe0b5d0202502f7eec162d15bcc91f0c76c4aaf8ff24ab58e952469e6728d7c75bed57d350e7f72f6ad745492a1cc0a2c154a54d004583c0154809f2923039a5aa21577afaefb95a4b8729f0f3af5ea8f067e2a5e94fee41a6c2ae0d4e57614b9245459fbbf1d9d17f1c88d9849157281968ac4af177543926ac16e65993f440b74654a97001f401d53a14fef433bd4301363f849cd528cf2116ee9804720f050758b7b1a2c722a0713e892cd6ee61d700eab0521a28860ebd82a8e9ac039f67f72a418fc7b35485653035a3c17fdf5ca5804249f44446d07293cbae8bbc5981d4faccfafce286226fb9a5740a99da8eab686362d576fbcf9b553da6d3489f02690cb1f1517bb06df8f633b5729502a333aa25a82e2ae392994f8b2f532ad4c9fe6b1b12ac2e97f77c5540a1ae4c6daa11a583b176812e9155aa4291f4b84280c88b74421c27a3983bfbd775f2d00292951d6668912f217fe5074f50c3d298e97f90a8c48a308ed8b6c425176a38293e7050bace9c4b7ed46a047568bfa3af679a3ef8e35d711d8fdce152410bd1d3bc52c9e35e1e466924d759f5215273ee24e8845c7932090df1b510afd66fdbf58d9546ed62d263229394792c6859d3f157de9f7ac00a7cac4e8ce3d6a981d1742d11d3a419599c525e98e0eba9f8c9b320ce3d3793bcce669f16d2077dc599b6d070cf34c3901a12892beadf46ac7e927561885b2fa09727adc401cc2b7a4afbdf95386fad6cc920544238a7da87d392dc5553187e5eadca3cc09dbb7cbaf04a4b8bf3b8327b86abcf307ef124b84134310172e9d97e0ca545b51458166e7475a8bbfa4427e07e157e513192d4e850c0009de21f78c8c0ae0d96022cfc29e2ef1fbe1a9997e93589783b0d529c30320f852bc8241ba6937ae9abaf4daf75804660cc3f7bf928d14132c7e6d3e48135877dedaa44de3dc7a0a4abf15ae8d0b12cee9ccb2a35c9204ab4c4531dfe2dd12787c2eae6a964ac3491b01d42b109b0fc1ac07ada6c476ea5d2fa93da203d76222b73667d141b5d9e3798bdefefeda61cc4570db1d468d58d97b5f56a0befd4aece293880e78ac2ba93b7a507b6350e45a36011ea654836a5e5307ceb682f19b2f2f9e6b82750c14e858477dc794a6720485c97ad0cc2958e4cc08c3c473904822f4658eea52501b91b78e5e2fbbe92cfefa974e5bf5069dc40aaf2cb2b5efd76eeb57deba5a390dc0e7494e70569eaf3f3aac38a4d93ac63375d21217016feacdd7ac93d35c6812cf5cd7bbf00e89dec112aaf899a9cc534d093fe313257c8011eec30819820cc797d2eaf5cd6c483d81c9b5412e60d5f4785bbeb521ebb79aa9c7f358fb46657f90178f96a8826570f97e87da982f4e3709ea62585f254a9188649b95e37ed64fe82b44cd4e5f2113274f556b48b5a747275818def3253cbdaf548a386f3dd76d732b865dbc9d7d552341516ab534abd564f0ce41d618a36661432eae1f4e1f48522d907166d39a336c4c69df011b3a31fd7767011c5330d87fe75943b59db3934951ec7fa01d0ffe502ee7b1c8ebf478ae506582c9f7a51182177f4a4965688179042672e35765acd1c17151b486ec3f51e472c6f7ed90cc75956b341d8eb6dd923c5089dec70614a38d1230bb8cc72405d74cea067421cdefd940478f7a7421af9f4ec04afb6dd70bd0930687206364adabec1844527949475febaccdbb6ab6cdd87e8e78c01aa8958b708dd78e9ffc0240ecb85aaca35dc2b500c8950167fcd2c3df3c4fb729b19e4c5c5a287192e97c6698831661b899f201f4a24f2430b292e66dc76bfe380aa67c072e94014282b9b95d654099aff6d252efbc00fff7f5f066c4f9527228641269f1d47395387c78fc6a33753e35bdeaa3b33b20b6f51eaa89556500f7b4fc1eefc3768943f58d0ea9a88d3d9e67fce1e3b7f52a74179db429a1e1e619db00478435259fcccfc6d580d3dcf5d5f294dc702df3c6c09ad5979861395b9d6095523e0f3c0147e69aa99aff14fd6e102808081bfd830ba758dc93367ca6f0a020c787279c3c9617382c5ecb017639d2dbc263ae4e61c12e244cf6fa5d6ee201b983f4988f8607819d2b9feb9690e8aae880421e44e93fa06f59dafbdcc7e38a646f6dad9a726254b50611a7f362cc373aa0615575dd34392abc665c66f05e9f3962a74222022519a80e509c8fb32299e1d29ad40274f980d39a495005e8a50aa874592c87eb4e3701df53be241f9d03b1c8adffd55349e521a7bccab89397515c0d400ffbf1c8fd1c76c367498b3cb46451a92732b460b169b89406652abbf38b3d324d6c2ad54a7b8d826a78fa897f3d4375335473be1522f366f23ab08f095fe0464f2e0f01f2984dff9a7e8d8b76e07dab81c5d9b4da30ec961a9f320c6d6057f0bae3e8778456a84216ff734c01233746d17001a518913d53d1af59dbe6a49d34b463d44e008008bfbdf14bffaf774eef28b61d3ce513da7c29c95d96fc4e759373d9d0b064a646a5c40251e8b1793eb0b43d14e784035454d2f1eecfa3430a3368dc964099e6d5a87ea0b869a7e6994d530fde6ddbe6818ddf144fcdca2f6c4327ac9013f583138701aab18b02cd5e7422c288524b0ac5be900edc484ea1fe24082746e53361884040e01a4b30435e01e25e20217b8f03e48ad348c3475be058d7bc33f7e36b2215fa47ffdab1c6dd2cef4d6c21ca3ae1527cbdea23ee91a7354aa6eaac3a8d1e5e996879e64df302948170e4041f9d22a2659a75418894d040220b09cf41e9da9423583d99084e430ee6e458ff14387f4a23fc184f4c49a86c6c713dd16bed121130c6854c6fc314ca287b246f2398196af8198fab9401b55d2b29fe04d78faed99127386dbf05569090f7e57809413a7c216bf3f2087801654cf1d32c20b0622056482bc0ab66a6b982c99ec565e6ddcf05ed83ba222bda32dcd9175f0a06866c236ffcfab54b718b8711eb31824e5e0f64c98e3cf0723a0c0f9524dd07511b6cb1f2da1483ee03539ae55c800fefc8e4a6313eba8493eaa124e5833ac989e09f743df5e1a519f5b55a4bb5b4ca7db4731ae2ec0983251f0ab3da9ca322aa8ea0769b5aeed4b73fa60a9df0cfcee24ae8172cffca435a34128f7239e120966089ecf0d72aa6d93df873d66cba38fa7de1f94e1331244581917b10baa27ba2bbeac21e86978c90bedcc1e02f53f45f54054ce0568eab500964f8377c16087097b4e885a4058c11ac372304ded935c325c879c333a5cd17f51174786e69ceb283517c94b7f41640bfd3d64e96ebbe5d0334d0b0231164489a5b1d56179e456da59ac150ec3231711a03e9fa16fd73e482b0358006f9482adee56558c250d7c9f42312b5b13fb52e23ef49237ca8e05ca6ee5da0c27d578e226c303126f566e59847845e9be6a01ee03eb102525e204a16bfb4c40bc010125d1d61eb5fab38de04b61dcc6eefd7e29a42cc3c2de7ade7691fae52e4a98fd3dc47cd5183233156228bc83277300ea25b1670b0", 0x1000}, {&(0x7f0000006d80)="247beb5c34b41e86863115b4a7ce4f265b0f7728f829c5f7027170dee73185dd5df437a7ac41742933c50883ab8d6ae113beed6dc5c7a482aee48ad4dd3b9cb32a13fc4f5ec72d9a5c51ce432cd31fc210584920b75d3cf41126dbf6cc7883a14dfca74e94e3033dbeac2b44132002d9d0", 0x71}], 0x4, 0x0, 0x0, 0x2004c090}, {0x0, 0x0, &(0x7f0000006f40)=[{&(0x7f0000006e40)="fe9fbb6edc4ad0cc911246158e05a7bab7b79470e11c509c59437dfd3688606de4fe47a436cef68bdb44b59e340719be127b50bd17c8625d65a7b6392fb0bec00b829de52f4d1ce2fa97ee697fab085f6212eea9d7f1193539c9541a12886667989327762d29d19313f93ac9bc07ecfcc3f9437ffcf4ea5d3e51c3ef29521559387c3c8c61695c98cddace2a5a1502acea170c254b7b8b542f6bfd6bd3029a162c68d9d0a6737b5b4c2bfbd61a6d900afeb6c074fd0ebe5c3214b400ed26886d06d854c5a5af", 0xc6}], 0x1, &(0x7f0000006f80)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x98, 0x117, 0x2, 0x82, "75a2a1ebb06ff4255d38bfc5d42c7094fc9a6e0c746615612dd5bc1452e3a8e4dedd0bfa5258ceaccf13c02358568892e01ff24a0bc135b1b2e938d70b13bcddf4b02fe74bb39e7e1463c2aa45fabdfa778a6abe78080efa5c774dad5a9ac5b67e5965fb4e6d3cf981df76ef21394a2f2c7e39b82ec5d542e858ecba35a907ebe967"}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x1}], 0xe0, 0x40040c0}], 0x6, 0x8000) socket(0x6, 0x0, 0x0) (async) socket(0x6, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x1}}, 0x20) 14:37:18 executing program 3: bpf$MAP_CREATE(0x1e000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:18 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) accept$alg(r0, 0x0, 0x0) 14:37:18 executing program 2: pipe2$9p(&(0x7f0000000000), 0x800) socket(0x6, 0x0, 0x0) 14:37:18 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x400000000000000}) 14:37:18 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) accept$alg(r0, 0x0, 0x0) 14:37:18 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) sendmmsg$alg(r0, &(0x7f0000007080)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="6d97afbe104e89ff52379ea1edb3becfdd79a14e63a8a28b3895fcc1915dafceb555e267a330fc4f197b83514c4cfe884a93dbf30e942d5cb414fc8a83800768f4c2cd321b2e48c42ceaa06cf1328216ea8debd29f01719839236ff3cbaac5fcfc84369f19cd5ae8c0bd76f8f90eb4bb95368d35241ab592f13c8de2c8c833fee7c46b1fbe2d748e1fa47d1e2fd3b8a558e96c862e60e56794ae37a2a0b8630df0b08451962d7e361b68ab16e73fdd9184901a35ea610e69e200ead95410375f4ba76381b1f2a59e659952bd9cce", 0xce}], 0x2, &(0x7f0000000240)=[@iv={0xa0, 0x117, 0x2, 0x8b, "8031ca3b3dc5d7e74523b1f3e54334c032c53cd8f9b2096c837a554b457f4594fcc254c80bfbe4e63d8634d715b894d075075e748843aa1c8dbf4e47f8e0c4100fdd18338d400dbb4f19140060abb939ebb783142576ec249b44da2888cde49170b908ececa4a77282c61eb8a7bdcd55ab0fb1b174211fb8160c17304a5f6af359458089ec0e5338c64b7d"}, @iv={0x40, 0x117, 0x2, 0x2a, "d28ab5245fff81ad5cbff3a0792463431ce70c2a5065bf71dd219bab7c835ae1a428cb4604bde1fcacd5"}, @iv={0x1018, 0x117, 0x2, 0x1000, "a34e597bb03fa0d09c5fcb743e2acb9d0a476917bd6565653219314e3b96099d0bb02678cf0fe8252a049127a8cc31ba9f494db951ddb8c5da1f1861a9781223887e07b4f36cdbb18628408f6689fd09d454f518e732706986127bf82f5618d39943fce0ed036afe1acc74888d84c84f52ca5557bd9db36ceaba58cdf5bae75fcce464c1ddbeabf326c012a2ad309b4e4ff163dacf9785a682ff6eca44e7ab15f75e2689e3bda050a90fc7b197af99d1ced0e1a6f95e61f8a760626b9ba39760e997f149cd63fbfaf7c4ead928c7b9da84c7f91e7b41e245d3c08baf40eb851b5b002e79363357b097947e6eee1da36e2f7945abc017097a69e043c3296e9933c61735d5b2bdf9a2b8d1de862f55f5a7ac651c8c97df8865fd8700386570ade18798323cb6bed7fe9e55892519e55b06998fe6c6919c69d0e5e87a8a20b780ec50d6d682dd6b924ab717acfb2971ab100b4cea267321e06ad12ba65ebf3a42a362bdc17b464817d8fe35491d99e8b926c349c74d761b81a01a82788a6fcc615ad4e3e48b421eac1c4feba5312106f147ab7347e572d0644a59bf12cf3f7c54e6b0e722ef5b0062c0e348d6551068999efa3b92e7bba9fa784a5b1934351205e4174d1576a3bcb22a04a24448a821d76e76a22bc1bed5c16f823a6e0666e81500d2648c0a2d595916d213ce46ff5a00857b07b96864edb76cd60d81a30a32f8ccf6fd5ed61b7a20f5660e88b546f08c52da84e48b80c26eaa17daf0979c3b6c25f10cd00fe5dc6011520cdb38feb1ee336eb26abdf1da1dd67f4bb24919b95f8069ddacced2bcedcf9057c59b26cb330447317aff4e24704f2cb3c382e9682a4e5f64c89b6613f17dc99c9fe4898ad74cebcbd47ee1acad49f2308384b4a385c5d7eac2965d5e40aca4aba92057a18700a3219c3568fae4873c684d4faa342a7ac5b2273b514e81eb729a4f79593d85283ba5ff0a21cc6ae9d35f4105ab283c33e2f71b80ea26a71445bee3a6b8fe6258ae6da5d31456289de55c703a038f81a352da6309806ac9e72f95dc1b37023764f2363f5ca2b3ffdc1540de132eaa6ff8e3a2909d26053e607b9ebe1853a304c69cd8a358347d72c756c9792359dd5076e9cccdb2ee7cbc656e01b3195e5616f1edeb2a4c50c82133d2ddbb1b2483cc49339d2ba0f1498bb56bfebaa167bc288efaae886ce6dc3756afd31aee0abffefa1b7c072dbc47c728200a3af3d7de10d6b47bf05f7bee79ef05cad40555366c5fe51e088a3db8aa4c9f7c569c6a0fa91e54bdb05433c72f25941e35cad8d78dd7d67aa47aa1fb459c9ee96376c1554535c6b0d99b5c32b8531619f80fb39be0e7e6fc21465239a4691e1c7ddbed654f007da945919b6cc6c297bd4953731a58363b93f8e8f1c07377898b8e9241f5d62c169abfd5d9e4b522a742651b988be8e74c15269a5c0574e324eb96ee7cc8496a3376894c47207e88bc94d2f42b58881b14b24e4614e7a7766a9b122244314cc618158e8c87b0eb3fa0dd081a017456e95679f558a5aadef447a123bb7624084851ed05908ea8b561c2eca1c4d35f881f8b5885a4e706d19d65378960df9612d97f000788ef2bf2de0311a2d72f440301e2848ad63bdbffcbfbe003d3b7436adb1150dcfa655a8f2a9852c56f55c98f13fc008c83112096bf7d59ba5b960bdbd409507af29f114b7250626b4cdfeba4a4998e4c3faf4eb081efb6fd829a8ae8ccb3bb7b02f3ff829799a1a1317e732a26ea3f40a2f0dc186a6d41dea0f4fa1bfc57d8c861e2d647afe0d6da38c66b6f9cdf3ed511235bcf28bcf6bbbe581db4238d4c1f4767c7ee474266f14217b9fb2b624ef77472ef35c347a03b8bf28db03788ba85629d3d858dd3dad615b2c5d49ea17b1e0ef751971bd47cf93f1c39d9491f95d5970ba486f43425b55165e61ceceae18b2b95cd0931ff8105f468d82625f72fb0ba2159ce2867de5ae23d300cfba54db2f604ab9161e0b62b012d4536f1ed0dd0db9e5d0ed2a8b7fc2756838d9e783cf1cd43f110fa2852f32c2b7e5789c2846d725f487745939748c51b9406f751107e373a663a6b7c8a55432aefc258208aedc72e283db54cc4bc52b906e9cdeabb46b8bb9d4c2213ef3e0b4027927ee39b9474692002ac89a30bb77882d2f177fb526a5c2873e599434d9b8e0ba0354db8da3143dbaee541b5066e5939059b20ae9272800c300c63bf41dfa766b979d5a7e093e038b1cc8190f3aea54ac3ecca81a2772310b50e18626c170a89f2eb396050f8f2ac733f5d399891cb0520255e4630329c7f88abdfcb14311aaf505063742dd24b1355c6c6d275304df0f43bd74676c5a2c9d039c379019f1389f7251033d93aa6efeb313ee8d02d75842f8c6be26576867d515573cc72724c5fccde8b7ecd7f76f952d2e7ca16c78cb49de3e24728547931e6dc7d1cf7285b2e6e85f759996d632d453d7d1f6185882ef1a5dcaa6029a22ef438954f97739623e2fa1dc6b5ac134ac8e474d95e94d4d03b8e7f701ea59500e07f0644ffa1c25457dc42f1eef27ba79ac34705902c8732b03ac499f8897ff35d9e9c3e38a0f84105b9569bb1867203a3caae04f0bf52d28ca3b9164ad06ff9a31f0d6031e8a9c0471bc493e2854e6ac095e4f29b33837a26d12a0e727453c1d4303618f7f1ae7f29ad717e8d97fa8bc6ca11d00d2cea15dab29e5ae9a0c280d79d67015e67bdfd277cf55da913032756a413998eb365e82898a02f41d08b3e0bc0ae3827ed664fcd4e21407a711b0d71867a281ed858694cb6c016a9634c802b5253ecbf7f9fb3d9941292024aae48594dbbd8ff3558682913d2aa4f9d18f48e25f3a8208ecabe20deb2ad86ff87b0009cf09177eef624c15a370e94f99d2345f03667068a122b5afd12ece27eee0d4573164f091b36c94ba8edc0282858b513174e9d48bb1c498ad0c5b26126b2bca9a9625891f1a6e20ef0759d546c24be25b7baec0f31e7e551703e4d8bb3f071a62dc21817a96a7bb2be1617fd3fadc15059d9318e293e24b0738a0440b55002a715e53c87512ab41a495c04f00ea42b982a8953b0b492a48eb05a7eeecad9744d582e5baf03b281eaf2fd98d5cc23b8356f0780b1993c58d462f9f127347dff7d68f947c9f2f287742c94527317f0a3b850518f5a3887a9b9af2bede9f576a246f125c91c0c6f94eeb1db8858a4137e811dc6bc7713bf4f8d3a47ace4f58c0426cd0dc4d59613f94a8bc118230c7cd90574696204c34dc2024dd9048e0af2f0f52cbb4d2f923eaf0f3c443b405cb0d4eac28f0e776549a44f4301862d8b559ef29136b022d0e90eee667b26dc0354a6f53ef9facb281588dc2cb72b4967b7eca29a901980e3012273d0e05df320b3d0f1ac72c1badafec157f5b0040978e64785985e695e155cef5e740d828ec0a9ada044541ddc8092306e71e50e8b621247f5462e7a1203871f4747c6a44f5dc37d935ab85f4359c4f99cae85e01d2337e44e1962a2b335136329ff706b657bf5512fb381f13878721b34e6aa22ea6ea3b76dca215fbb454e615c570a158eac764e40aef28331da0a9710e40f849c5bcb6a2395b7546fddfce7e72e6a887d703497c4d40535b23ce5e0486ccc3b893e19ed60809d873b5d2d9979c3648267db8b1e4249187acccf46184421cf4785eea40a21a59a8f44cfce73b821ee51234680e4c3e639563fed8f09eca014022563b45543e5d070e8c24cd6e3143b4b24e68afcddd90196a3920f5c1f86bcc3dce12df94407fc7cdcf0a3496945b6d92d622efa5ed336a7247a5fe6bf24266ea9407d5257039ce60f8362a121e30e397baf2038ffb0333eabfae8d890869551583fcf6aab5573cf09add477b8b2c5831fcbe5883d274bf0ccf259c3d6b404b121b67d9d6615f00843632c8d6591eb9a318e993be1f71dd1144ee9dd12b6d6f8df6720c3a66e09a287e35bf4890e7de451c01401d92a1568eeac35d149e01f92bdfa6fb100be1cce28a4c35a0cddbf3f537ae1d23eb210f7c0c206e649a5b14e78de7ed20f681235863c6334ca1faa27eb986d2627e76112a2031f5cadffced347b04ba6b2d1aa0fec52e7d994aeb8370ea13db9c9ac48d53436854f23bc19c95617d6802898263129e2421f9864c2fc1f8cb517bcd31673e22694f28d6bcbe4658300218b948458780e894d4d3b4a0271fee6729151fd680e240c3fced80f57a0329bc3d290c9b322ad1c5ba871e488720c10c0171d172daa076e2c6d68b7cffc06136a209c91a90628e1b838e4369271ca631de1ba32cd89d5939bfe4b9f76fd44d68f81107230d49b6d3125d85b2556a3e4b31e5fcd4cfb4cddf7a20fef9b0789a4621b3bcdc89e010f5fd0ba4c850db24c9e6582b054479ac0f740b700a9adf6314f9c5f11cb3d0e24623e54ba3ffaef2dbe8001eb440f91d37419d9a44783b70391bbde3cd1ef9feb068a18884b437b480f7bb8075c4bd232304660ea4276288f9d3a6734833261d0fe12883f81a5e13519c94112f3006ffb864068ab47ebc497d7bd57635a43b0994c147bbdee2be568c407c5ebc345071775ed613d6f662653295862c1e62a5bfbf0530924333e2b2f789cd4276d4632093ce26535c16aa00654c8139af41d4d51d8712341e5312a00713e5643b524650fa1dc5e52e0d3ee1dbb217ea04250eb77b57f0d841a251e7cd53fb44f1d2abd74feb7ba2ab365260d8f09912fd6f9d0c395aa68930e66ec11e28a662c99bbf7c5e613d56c6d3b8a50b2b3558bf3b7732726892c52323847311347ba31251927ec3619144d9aa71ab2d32c89a472276a855d8396bef50797b8dcbbd0472b7e257035e7aaaa4546b32d48cd97872f010e2c3f0e05a03dbc58fbcd4f4a5ff54638481aa4c3d6b75f23b34581dc76992f63a4c5a6eb8f97e059eabebf1f69065e620d474ce24e049e768c1b95b2d5d8152de0ac24a6994c11a3df1dd6a137f61dafab1fac6dd37a4b15ab5710c30551508851a2a0a462554e1fb7c228df877c1ab240de443d07a669324b8c06c2afbbc3aeb35cdc2761c4deb961af0c1ee6af665d2a458d8e65254dc1e14e66096871cb46191c6f9c439cc076e624ad21bfd9de68fd30fd62378f147957327e1c1032c29cb0fdcb4a68de389fa8326de62214c94b0f267129a24f760ed6b324b9ea06c18758110f743aa33d8bced133fad59fbf0462286c7232c57eabfad3178899e52d8e8441f03330b7f8925292ca7deccecac2066cf70eaf4e34eea7982d61169c046a9b866e5e03d0a68ce234476c20852a02d7be9f4a33124ee3eaa59dfcf159a54969985fd42e9280e78508d39d0e21aa475d270d0ee80f75a0401a840b256958edaebea7ecee785c812e749823b605c04b0f920a4cec4d19e5f775198c3acb2db4ff545a012c338cd1f65352f285f5c3db24a1be1997c8ea31e3ba11ce05100b614d7e4fb2c2a3517c397e238d77aea3d483fb82a45dad3cc6caaf384715dd272f406e543f4769ba15eb9589c2d13598d13e8d5c1e2a3bcd555bc9b00e2873ff40008e33f644c86ef3e4166873d714c335850fcb39289fc94a1bd86363d1cf70829a0c90ff8199b2908e853a432254ddf27597165ca16c42484506e85671a342f2e890984941e7956602ee535e8730c3f0a1b49bbbf9aaeb59600fbdebdf48f0af5f5b555d403aaa07c0a676e4276f7f157f5042091a7545ad2f53a05bcd1030d6876b2cae4ba467706e9065e3006ba2a00852817da44e9c10c6b0510fbce5696511b57d99"}], 0x10f8, 0x4000}, {0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001380)=[@iv={0x60, 0x117, 0x2, 0x4b, "37a906cba918ed8c0527ca9a22a38848475866a86bca4eb95c48c422c0b680faeb222c0db9fcd44a4128dec737f47624a0e4faabcdf489f38ebfc3308f670e85ac5ce6b09b05a2f257387e"}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @assoc={0x18, 0x117, 0x4, 0x1}], 0xa8, 0x400}, {0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="96d451d7bb24fcb1e37982a6a36086bac2841b6e7fae95de6e659fdfa503c4cf112e2c1731b0070461977c566822ec8a32e3254ad81567598eaa304234377053845f913e21bf43bfe3dbadf2c496c02c835a11f4eb1c94227559e65ef50fc3c9ac9b24a8e46a044a2c9f0587778eccc53834ddd5271c528dd2b5ffb38e115f7b78166cc57a87fb8cb146298417418b05d1c4d49ada660749a2d9c7b9044a1dce406cf4c0fd142035ff504785375b6755cb502483b90c755e6e74b5cc5d3418ac661790f397e3e1572e0c6da3a90dfdb41997a9ea306788a275a25df8f38fa98f0421ce7dd789aac2fa5cff5ffee9e09a1131bbf5e0110d1069ddf174944dd34c57f03c8d61dd3a92cf2dd546cb4f14ccd87e2b3e1dacb6be52842392eee72cea49ef95cc2542100492f674f52b5cd2e2a3e8547b6426681449b38237272b0184f29e48b8a38a492596a755a7a2c472585e29e4ec5b66a56de8b0b088ca58fef60d6f7758e60d741678f2220e5826ecb98174dbe190b8d5da02a52dfd195396238d0ddb5f287cf1b1ddf1bc5135d9d0257c35e70c17fbe73fd88bbad0eb018dac3e0462299bd4a236a948b934d851a6bba0655109a06fd0fcc4a932779299e7d0c3e6e30d6f7b0bac2bce3ef07cd8f4fb0dc6a1566bdc4130af5c4d704a6be9ee3cdbb905fef4e71fd16d6f24cd57000dc1970fe93b5d5a4a2733df723181220e5aa3f99754866e6f58d7d4a5a90f9b42012b6c02848ae68d620dbca6805d947f31a302c40d6fe89c8c2d517e2d8dd9f3ef4a20ff46e220e2e3377268103de406d0a44182588d4c4f68c7c105c1b0d31641ba4b8932bf741de2e0a714f3428a092caf009f11571789e66b5654e95012c17a29def6067cece37b17d2c7121df5fee7ae8b0d9297bc36717efc952005ddc806b257b47490d5805b0e33f188a52c55840d7409cb5bbbcb1a867d7e67ab2d10074ff94e462ff618908fa7af449b1a5256c50d3574a4bafc9bc931aa055f5e2004a1bc0b2ac208dd622b82cd02dc536c117a8c1cde6668f276d8e165b2d570bbb21175936b053d89f99827736eea25417ab6570cfe5c92599a6eb917cd98d6ee5f7e27b3a4c9e5dde30ea331dac2bb025a921f03e566e1149acfb065b47d11ad17db8e322c95115d3fe925440dd71cdd15bec8f789f1a51b3fe3967051f0d8f5378b992293659eb62c5a3b565295fc2a077d48ad676d51444ab8267364070f628858ee1e4cc816690d09fd453b153b5cb00ff5033917807edaef0dfe23e50099e73c29f033faac06eaf4b623c1218ad0674f6bfb3fbeb56c28b0b5d6b5fbfe8b7e69facf6f70c8a37bcb0e48d765a23b807ea8e05cbb466f0bb29e00d631549bc732a79eed497fbca2c8c74afe9c82eb2de001e4871b73e6cf1e7db8a7d201d0a2f986a318c5a5417e30a9cd663f82afc0153a11670e3ce6d2b3cd00c415a5c5a6cbc0f87cce585603cde64cb0b5689ad4438c972eaf7611ac22fe200acfbdc9c8fbe88adf27969071e840fbd19e6c4d88d0e18c2613b5e3cbae0df39c0ee5de7524a80454e33bcc4e1e55c8f174ff33983023eea802d4f78d0000e565edd8fe567380cc374dfbb451075fa7d0f88740068b1cfb8d3465a2975e882bd214092ba7d00f3ce55af964b54d581d3c08ebd03d29be827e804a14ceacf977d49438cb8bb2d89dbab3db984ccfc5a9193f042a3a7f080b2786faae0ed21ff899e9261c645e75ae5c489ec187de7ab01dcc303c49533f3936aa80f13b9e5ee750dc64899e859475755d9ccff40210055ed42886dd170251ffd390c0c7fcaf1079945089ffb96381415e27cc767962119bde67fb8ab301349d36caf4203478ebab0fd56d3c904fb659378dd93c2eef01fc5e3ccf435517c6f1471a0c68534df3d0415a1f5efe644c92649dae7bf3227cddc24f5f94cd31a661e73dd63b07362360c8625fb2bfe3c7b78edfb8053132daa821ef32907577663218629584026c1425e2a69f1c94bd49919f92a48cbda39602eff21fe96fc7982d8a7539484cbda90d14fd225cd74b52e71d36766f0a024b0dd0bf3f49d35f400b0cf72651734229b028a28d82299d54d43ef007b80c175a0dd546d62b5a61afc5ddc679b194dc9d951e65177973437234e2b16ae5f1c21f09dbaccbd90981d3342acac47faad9c5005c5fa6efd7e772c2c8770c8bd64586761bcfd007a79abf3c87ce327f14793943f07a2e2d3252ef7e1cf36cbce77f76872dfb034e3d75d7d2cd1d5cf8b9e696d4fe2edfc9c9f8308c9789983d1221b43252f11a349910cc5bce4b6f6149f4e6918288f62b54c5ad74ba3d40a42153e6d8c96337a23e5612772e9f8bda04513daa66eab82e7800568dc9a8d47dc5fd3eb292302f70fd21e45c46825e529ab040a4e7cd674391741c7c6857c4589e14af1e0d4796537fc5f454bc14c3776ff06739e5cf16b3c9a0978d06c1482db01a13223869a9189f242b8939e087664037e96e1700eea73a964709bf417bc609b118a680eea24138f5c2f27ef77f16de6996b441a6387eb2a73c8710c316934553f20505869a26f8e30ef8bc7686deaacede709d37332e7d56f607db495510f9c49705732dc3816c6b8899fe0d2e0b1bcecf52ecb79989e3b3ea346e9c125f08bf456afc840cf6cc1bf8031c575095ed239a4882dcf0d4971b512a829bc1e9c45b90c5f97e13aa2c8963e33fae5e741c0dfef5ae379fc8f1f5b0490507dbbac9064e9be6362e0d463ff19ea8d51127cbb8ce800db18f2ed44ab349f9f5fe5275168d02f44762357438d504b93f92cb8ec17578806cfa5536477d8334741af4aa4a988928185f8c2a2fd3afef9c454b9ac540f6c8d7853ed6e9b6ca1cdd6d440ad639d96036e95e6ed3c3d27ff989c884b3bf2ca4a34b798d8adcdf29f56789182a77677481f00bdef2b2497e36158ad66e041aa89309c3c44cb74ce8c42f92f604dcb3b774638d902c1cd3cd54faeaec975ab56a8aa737c5df9f6b4a68f220cd3ad8abffb890a30ab6e715fe321cbc39cdc0a1c9a373e3dd3eddc07a29e227da7499b51753e3986e5757d9f9b41ad663fe9e813f27ac45fc1c077fd7ac6b45f393942cf1b285dd3dc8c77d6762ff95a160da4cc9c500f80676cb89284113244880eb207128e5293ea0a58294695747465ba8108bea72b6fa22ad8f42fae3b31f759a3fdbb80f39ac49beab22c04e1e46e7f4ff74e146d88c81bd9c58c3190b48d877d226f847825fba45fc4c7a3007f44a7b21a6c77a7bd28b502c29435127dd34d1cd743af6ca3e82df99f4ec6cd67980635d368b34baab757fb90ac764c5a4ea913c8451aba9e8efd6f02d702b6fc9e072f3b4a51b9e24d836db15491b049c043ddaa40cccdf2c87d21d62ca7fd18a64ef19523737424a463ef7d915c661102bd3c62763ca6cc7ec379a3700088df6b9e537ed4b8260ee655f32224ec5139afa0311ae03a919b084b6058c05b78614c3e681e38a3b689028fd361a79c20755e6cbd7d0d5bccc13fe79e8e079d60047e3c86dfc62fc7d4490cb281d56521ca2d621a18e9e949f3f5e06ec3da06fffc01d6b49767a80012e5c92c4b3fe7a18249482da35a2ef8c177e20667269ebe5c316588483b5261ccc13033ff14acca51e814d706908fcefb4a78f0a6bbc0fe0e952ac523a6f902d11bc05130d0ee11620120a8c7596175ee97e246e555012fe8ae5e05914098f82929ebaf2ce9bb4354603b9d32a9e038a72e8abb5d59f129fb75b31e17eef86596a0967fb12ca5397fb01cb639b42431534fd90bd2eee9f9dd014467c5931278eb97e39205e6693fe91d26d9cab50d8128d0b392d871c39b1aaf5b06e9c553b6ff84fef016e7f2684c0ec6fe63a732e461f783dfc683636fbd51587957a44b9990bf1bff411c3a0b075e198e0c1e0fa6bd49b69c4dd372cb51a415760c93be391bb47dddd98a8e56293554a5cfbfc57bdcaf6daf927b2941c78ffe14ca0359bf502e20848a7858d3465ae37caac68de65bc729598a949921301c792d85bdcbff7116137d1044e6f2e558491870a49a83c76d06727d35c2d28fe14117e6dbb6ea4dfa71b7c326f5b5bd702b707525c8bef3cd89b076cffa3a880c225609ba419d615c214d5f826c7efd48829a61b74b9c5db49a25be87fa0cd185e5f01eecffcef8ab3b69a8492b444876151cacd05da0f7d8f6f679089d65cdf04c62142c6eefdebc3e64f76a220d5b6e8cf547b683467f7cb6d52cbed50b1e8b006c11d71b5798d5d7016122f984626a9dbaff844b08086438bf6f5195096695a18862b4341e9d133ce8b13a24ac7b01e52066473549415724c6ae3502ffa2679d62de73765e8e5c72df573e9bae90243d6b1225c02aef47ccae8c17e86d5172e1c342ca9e523f6889ab2eefb6534e922692077f07cff55174e7571734e304cc0cd08028a4ad79909951b254e7451bc80ef46215c488623000d8de61e541f7230873bbc7878580240178c5139a5c12acd328e689893ce7ea5cd80910807b04180db6315aba2cb81e05caf6aca96c1df22ead497062de66eaf220bea97913f2a68bb65d45d876dad38823e0245bf1d6098d7f0bf455061e59678bcee8942d731e8c94e4401c19e705ec7801c1f844bb3b413a1046186ea761d1b9e05b2cc685b6d2535e020d369ffbf63ea5c8818e269d6f6c3d60456cff40b6156a84c54f5bc618cef5b9fe24de40573bae909d4f0e6955f11a0157d846023c4962caae48ffe8ad851f6dbf60da0b370dcac612efbb6b00fdd152715babf5f4c77e91bb17f764183335b5a81384633f4e71e57d6e286961cc8045a4814cd7302bccdb96aed519dcc8f7cbc524a692b48b5137452bacdaafa34a49bde35ca97d9c0d6e44ca789bca68e6b288fa52fb576d1cf01365c34d308e5acbde8199be907300b97f294d5f1a1579006aa0d8e892c557a46f36941e26f0dc2604cc445493fef3da5ed3fdf85f87295d91b6523fa6c71e3b67816605a8fe5c2fec79ce813baafffbdec9daa12b502700050119d2db8a031b9f654c9ac38f33abb2f51f96e26f47432e5f7e62ff8388ac5014292db5ad7f9c8210bdd8cb607589007d91851583ea73abbbda0ed577d82568e0be2d13ad6c5c4f00b39da39d196a75c7c512ba966f6fcf89855cf363a215711e7ee8eeb5f1a34e3629ec847e8a6b0ee96aa939dd7374d51fd5c5dc3030069432edcfa6976a587a36d31284fefec7e6b47c73313093399496ae9e9de27de8abed4bd654ac8bc3b1936caf2dd1d7ee727e5bc7e2ae8451e32821d02db0b70f794812230042d7e80e9af15c538c2b4d88ccd0d9b161273cf656599c91d2c863ab84e045dd69128e367180d1214610a28a7990bf07afd7aea67ba973cbda49165c9487d44c3247a967eccbf94e64d089ee7bec1c039a338c3f820bd85110c50c128dd897bac2939334f4690be20b77eda26e6d80b9749613ba052f3a7dafa09192f7838e0d2745e2c866e71b48f5bde09400528fd703f89922c4b785e0f1af269105c3bb41606ef0fde616f4c920d3e772605f34fe493ab6e2a9fc32ab8a38788fdd39c1d4e87e10c3d3893bc6e64197eeea351a19195208917a1f70a7945cbe28c0bfa3810c06b6195ff1af8c7f44ef4447d3409dc34e36ebb8f784d253978ff1f6e19b16649401c00b8193acbdf66b80c62f525ecd2e7e86d3a4de255b47e0723f5f856502a87c58a330f94fdc2c8657083e6de1eac75758af0d5b3a080899aced74f81c24affb0479b8d9f216a62797e", 0x1000}, {&(0x7f0000003440)="75cebc6c2a54bd60ec7754b3ac7547ee16b3e92b2d3a032d93d36c9d866d26c86aeace27732fcc8930b5909a404ae0457d7a00d95201ad828c9df8d1b6178bf290d2324aca308027b6ff5c2f1bde32e09ea1f87fe6f6f7b15249d522ba0acb62a98a39d507c59167851dd240bab9e14e27dd5ccd79082c793210348f621624f45cf6c19dca", 0x85}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000004500)="cc39155507eca285be77bd4b0a4880ec2bae5797d0a37bcbec3b517993ff7177f7c6b1b0366e8545a73e9d7bd39796d7f4f9341bfb89c8ae8e4e9348af3371fed4869bb084f33f3359fbc73c2f59f53a3a2161187d3dc5f75bdd3eda211d8c0f88036e3635670e2da6b4cca82e8d5c334237f8b38d7d466df642c7d34ff70211167d87cf81b225e09d8a9e5af6f79fc1d20719f97c066f55dc759d4cd5420f2b0a0a6a5c53e5d430a662a44e384ffbe0fbb05a715935349869ec526cb9788cc17eb93f", 0xc3}, {&(0x7f0000004600)="79a25f3f4b897b0a2908603bfa29bd22939dc0", 0x13}, {&(0x7f0000004640)="8b02c6cfe13dcc6843f654ef31ee22b3afb0db11c3ddff9e2a2cdebc6e043f4c353d178097ca0cd718d305f37f21d634f37d5e8542314a9af3d9b6d241c0d58857227094b44fff20afcec1c9cfb365bef07e9377df065d53e05934bf66dc826a591c37d890ebce556826b79b889609f412b811166021aee04f073e1d99f3119e0dc03fc5764e0fefccd6563a2df875fb7901b5e6d6dc32876e361cc7bc0567025aaa7eb81c6c0bd8e5d09626358d5588709c1975c4f2a9f4e69f1368435ef8f9f1434615b82455bd7df5d7a309a64da5a618", 0xd2}, {&(0x7f0000004740)="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", 0x1000}, {&(0x7f0000005740)="c404eb474c7abdcf88f688756eb6f6bfaadcf43f8f40a34db9aa1a837ccca2e7e5d057227f3a0dd1f47298e52fac5adbad5afb8dd3a990282490551c383aaea9f41e32364c33ff002f14923736d23f5f89efc910a3ea522b4567511063f9f6c511272af68694ad126e92cebb557010bbefdf7d52226b253962c6763f9a81b980cca89622bddc6417a2fa498774a0510fdc29ccdb33b951cce3", 0x99}], 0x9, &(0x7f00000058c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0xa6}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc0, 0x117, 0x2, 0xab, "11e5bbc80e72550a51b374c2820281aa6f061b294a7edbcf4369465994eae27a79c404d992ef8d7bc457c9b47b5708e9ee72d23e869bd40ddb88cf0926d184579b324a6efd9e4547b850f427c37196e7269e7b3408a8d1d5f70a72dfca07019ef856d5061021da9884319639b4082c04ad106f28317fcc89a0846a83e90c945bcb5e923a6b7bbabc1aa8ab82f82ef9732e775ed7afe9c61c3a39c336f399f0ba1ba2c4d312ab749c7d9475"}, @assoc={0x18, 0x117, 0x4, 0x3e93b482}, @op={0x18}, @op={0x18}, @iv={0x18, 0x117, 0x2, 0x3, "a65458"}], 0x168, 0x4000000}, {0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000005a40)="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", 0xfb}, {&(0x7f0000005b40)="a158114b82e061298d08c4c1ef19", 0xe}], 0x2, &(0x7f0000005bc0)=[@iv={0x68, 0x117, 0x2, 0x50, "b61287f21916221c0891148790e86ca371da26206a36f886b870c687372d674d6d8f0e5d3583b5a4bb9f9594521f4441cf7c7b7842b330629f79ae81842a059ec9e18158c2f1e0bf19a9344c0eafa048"}, @assoc={0x18, 0x117, 0x4, 0x6054214}, @op={0x18, 0x117, 0x3, 0x1}], 0x98, 0x8080}, {0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000005c80)="7d3ba0abfca38c852acbc3a1909cb59c15e7188c2c4fc990a2bf036acacc62157647742f79e4314dbf77a30d924b282f97077e0dcf1b34bb905899980ea301f22daace49606d315c5a101c66415fb8b8", 0x50}, {&(0x7f0000005d00)="2c6137636184e414494209ec37a7ce369be721b442971f5acf0ff61ac2d1569632d76d2da37d33262fa826ff75528112e350313005cb5821a952a4b995a2fd236fdebc4bdce44a226c6d7212351e5f", 0x4f}, {&(0x7f0000005d80)="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", 0x1000}, {&(0x7f0000006d80)="247beb5c34b41e86863115b4a7ce4f265b0f7728f829c5f7027170dee73185dd5df437a7ac41742933c50883ab8d6ae113beed6dc5c7a482aee48ad4dd3b9cb32a13fc4f5ec72d9a5c51ce432cd31fc210584920b75d3cf41126dbf6cc7883a14dfca74e94e3033dbeac2b44132002d9d0", 0x71}], 0x4, 0x0, 0x0, 0x2004c090}, {0x0, 0x0, &(0x7f0000006f40)=[{&(0x7f0000006e40)="fe9fbb6edc4ad0cc911246158e05a7bab7b79470e11c509c59437dfd3688606de4fe47a436cef68bdb44b59e340719be127b50bd17c8625d65a7b6392fb0bec00b829de52f4d1ce2fa97ee697fab085f6212eea9d7f1193539c9541a12886667989327762d29d19313f93ac9bc07ecfcc3f9437ffcf4ea5d3e51c3ef29521559387c3c8c61695c98cddace2a5a1502acea170c254b7b8b542f6bfd6bd3029a162c68d9d0a6737b5b4c2bfbd61a6d900afeb6c074fd0ebe5c3214b400ed26886d06d854c5a5af", 0xc6}], 0x1, &(0x7f0000006f80)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x98, 0x117, 0x2, 0x82, "75a2a1ebb06ff4255d38bfc5d42c7094fc9a6e0c746615612dd5bc1452e3a8e4dedd0bfa5258ceaccf13c02358568892e01ff24a0bc135b1b2e938d70b13bcddf4b02fe74bb39e7e1463c2aa45fabdfa778a6abe78080efa5c774dad5a9ac5b67e5965fb4e6d3cf981df76ef21394a2f2c7e39b82ec5d542e858ecba35a907ebe967"}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x1}], 0xe0, 0x40040c0}], 0x6, 0x8000) socket(0x6, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x1}}, 0x20) 14:37:18 executing program 3: bpf$MAP_CREATE(0x1f000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:18 executing program 1: bpf$MAP_CREATE(0x20000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:18 executing program 2: pipe2$9p(&(0x7f0000000000), 0x800) 14:37:19 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x500000000000000}) 14:37:19 executing program 1: bpf$MAP_CREATE(0x21000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:19 executing program 4: socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5}, [@ringbuf_query, @alu={0x7, 0x1, 0xc, 0x9, 0x0, 0xfffffffffffffebd, 0xfffffffffffffff0}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x28, &(0x7f0000000240)=""/40, 0x40f00, 0x20, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x3, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0x1, 0x1], &(0x7f0000000340)=[{0x3, 0x1, 0x4, 0x3}, {0x0, 0x1, 0x0, 0x3}, {0x1, 0x1, 0xe, 0x5}, {0x4, 0x2, 0x3, 0x6}], 0x10, 0x28000000}, 0x90) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60000000}, @call={0x85, 0x0, 0x0, 0xa6}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x0, 0x0, 0xb, 0x9, 0x10, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0xffffff00, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x6, r0, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x6, 0x4, 0x3f}, 0x10, 0x0, r1, 0x5, &(0x7f0000000440)=[0x1, r2], &(0x7f0000000480)=[{0x0, 0x1, 0x0, 0x9}, {0x2, 0x2, 0x7, 0x2}, {0x3, 0x3, 0xa, 0x6}, {0x5, 0x2, 0x6, 0x2}, {0x1, 0x2, 0xb, 0xc}], 0x10, 0x3ff}, 0x90) 14:37:19 executing program 2: pipe2$9p(0x0, 0x800) 14:37:19 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) read$alg(r0, &(0x7f0000000000)=""/4096, 0x1000) 14:37:19 executing program 3: bpf$MAP_CREATE(0x20000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:19 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x600000000000000}) 14:37:19 executing program 4: socket(0x6, 0x0, 0x0) (async, rerun: 32) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5}, [@ringbuf_query, @alu={0x7, 0x1, 0xc, 0x9, 0x0, 0xfffffffffffffebd, 0xfffffffffffffff0}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x28, &(0x7f0000000240)=""/40, 0x40f00, 0x20, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x3, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0x1, 0x1], &(0x7f0000000340)=[{0x3, 0x1, 0x4, 0x3}, {0x0, 0x1, 0x0, 0x3}, {0x1, 0x1, 0xe, 0x5}, {0x4, 0x2, 0x3, 0x6}], 0x10, 0x28000000}, 0x90) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60000000}, @call={0x85, 0x0, 0x0, 0xa6}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x0, 0x0, 0xb, 0x9, 0x10, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0xffffff00, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x6, r0, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x6, 0x4, 0x3f}, 0x10, 0x0, r1, 0x5, &(0x7f0000000440)=[0x1, r2], &(0x7f0000000480)=[{0x0, 0x1, 0x0, 0x9}, {0x2, 0x2, 0x7, 0x2}, {0x3, 0x3, 0xa, 0x6}, {0x5, 0x2, 0x6, 0x2}, {0x1, 0x2, 0xb, 0xc}], 0x10, 0x3ff}, 0x90) (rerun: 64) 14:37:19 executing program 1: bpf$MAP_CREATE(0x22000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:19 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) read$alg(r0, &(0x7f0000000000)=""/4096, 0x1000) 14:37:19 executing program 3: bpf$MAP_CREATE(0x21000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:19 executing program 2: pipe2$9p(0x0, 0x800) 14:37:20 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x700000000000000}) 14:37:20 executing program 1: bpf$MAP_CREATE(0x23000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:20 executing program 3: bpf$MAP_CREATE(0x22000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:20 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) read$alg(r0, &(0x7f0000000000)=""/4096, 0x1000) 14:37:20 executing program 2: pipe2$9p(0x0, 0x800) 14:37:20 executing program 4: socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5}, [@ringbuf_query, @alu={0x7, 0x1, 0xc, 0x9, 0x0, 0xfffffffffffffebd, 0xfffffffffffffff0}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x28, &(0x7f0000000240)=""/40, 0x40f00, 0x20, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x3, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0x1, 0x1], &(0x7f0000000340)=[{0x3, 0x1, 0x4, 0x3}, {0x0, 0x1, 0x0, 0x3}, {0x1, 0x1, 0xe, 0x5}, {0x4, 0x2, 0x3, 0x6}], 0x10, 0x28000000}, 0x90) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60000000}, @call={0x85, 0x0, 0x0, 0xa6}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x0, 0x0, 0xb, 0x9, 0x10, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0xffffff00, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x6, r0, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x6, 0x4, 0x3f}, 0x10, 0x0, r1, 0x5, &(0x7f0000000440)=[0x1, r2], &(0x7f0000000480)=[{0x0, 0x1, 0x0, 0x9}, {0x2, 0x2, 0x7, 0x2}, {0x3, 0x3, 0xa, 0x6}, {0x5, 0x2, 0x6, 0x2}, {0x1, 0x2, 0xb, 0xc}], 0x10, 0x3ff}, 0x90) socket(0x6, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5}, [@ringbuf_query, @alu={0x7, 0x1, 0xc, 0x9, 0x0, 0xfffffffffffffebd, 0xfffffffffffffff0}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x28, &(0x7f0000000240)=""/40, 0x40f00, 0x20, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x3, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0x1, 0x1], &(0x7f0000000340)=[{0x3, 0x1, 0x4, 0x3}, {0x0, 0x1, 0x0, 0x3}, {0x1, 0x1, 0xe, 0x5}, {0x4, 0x2, 0x3, 0x6}], 0x10, 0x28000000}, 0x90) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60000000}, @call={0x85, 0x0, 0x0, 0xa6}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x0, 0x0, 0xb, 0x9, 0x10, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0xffffff00, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x6, r0, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x6, 0x4, 0x3f}, 0x10, 0x0, r1, 0x5, &(0x7f0000000440)=[0x1, r2], &(0x7f0000000480)=[{0x0, 0x1, 0x0, 0x9}, {0x2, 0x2, 0x7, 0x2}, {0x3, 0x3, 0xa, 0x6}, {0x5, 0x2, 0x6, 0x2}, {0x1, 0x2, 0xb, 0xc}], 0x10, 0x3ff}, 0x90) (async) 14:37:20 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x800000000000000}) 14:37:20 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) accept$alg(r3, 0x0, 0x0) 14:37:20 executing program 3: bpf$MAP_CREATE(0x23000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:20 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xcc, 0x0, &(0x7f0000000580)=[@free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/137, 0x89, 0x1, 0x2d}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x71, 0x0, &(0x7f00000004c0)="080a7b5b404762ec79624418617484d70a34df7813c01536a4539d63bbce6238e258ec0e7bd3d9c33456e0209d7371150e6a247c6b5d466f95dae01be49d33fc9ae785868b820da1f9aaa92de29c8bd42aef046bd5bec1ee31c847452b68cfccf901b03e103e5d0b7a60b550580a82a23d"}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r0, 0x0, 0x10001, 0x0, 0x0, 0x8bc91, 0x163722}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0xb, r0, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x10042, 0x0, 0x41}) 14:37:20 executing program 1: bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:20 executing program 2: pipe2$9p(&(0x7f0000000000), 0x0) 14:37:20 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x900000000000000}) 14:37:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) (async) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) accept$alg(r3, 0x0, 0x0) 14:37:21 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:21 executing program 1: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:21 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xa00000000000000}) 14:37:21 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xcc, 0x0, &(0x7f0000000580)=[@free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/137, 0x89, 0x1, 0x2d}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x71, 0x0, &(0x7f00000004c0)="080a7b5b404762ec79624418617484d70a34df7813c01536a4539d63bbce6238e258ec0e7bd3d9c33456e0209d7371150e6a247c6b5d466f95dae01be49d33fc9ae785868b820da1f9aaa92de29c8bd42aef046bd5bec1ee31c847452b68cfccf901b03e103e5d0b7a60b550580a82a23d"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xcc, 0x0, &(0x7f0000000580)=[@free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/137, 0x89, 0x1, 0x2d}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x71, 0x0, &(0x7f00000004c0)="080a7b5b404762ec79624418617484d70a34df7813c01536a4539d63bbce6238e258ec0e7bd3d9c33456e0209d7371150e6a247c6b5d466f95dae01be49d33fc9ae785868b820da1f9aaa92de29c8bd42aef046bd5bec1ee31c847452b68cfccf901b03e103e5d0b7a60b550580a82a23d"}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r0, 0x0, 0x10001, 0x0, 0x0, 0x8bc91, 0x163722}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0xb, r0, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x10042, 0x0, 0x41}) 14:37:21 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xcc, 0x0, &(0x7f0000000580)=[@free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/137, 0x89, 0x1, 0x2d}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x71, 0x0, &(0x7f00000004c0)="080a7b5b404762ec79624418617484d70a34df7813c01536a4539d63bbce6238e258ec0e7bd3d9c33456e0209d7371150e6a247c6b5d466f95dae01be49d33fc9ae785868b820da1f9aaa92de29c8bd42aef046bd5bec1ee31c847452b68cfccf901b03e103e5d0b7a60b550580a82a23d"}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r0, 0x0, 0x10001, 0x0, 0x0, 0x8bc91, 0x163722}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0xb, r0, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x10042, 0x0, 0x41}) 14:37:21 executing program 3: bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) accept$alg(r3, 0x0, 0x0) 14:37:21 executing program 1: bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:21 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xb00000000000000}) 14:37:22 executing program 3: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:22 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x29, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0xc7}}}, &(0x7f00000001c0)='GPL\x00', 0x7fff, 0x1000, &(0x7f0000000200)=""/4096, 0x40f00, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0xe, 0x1000, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001280)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000012c0)=[{0x1, 0x3, 0xf, 0xc}, {0x1, 0x1, 0xe, 0x3}, {0x1, 0x5, 0x1, 0x8}, {0x4, 0x2, 0xd, 0xa}, {0x2, 0x5, 0xe}, {0x4, 0x5, 0x8, 0xb}, {0x4, 0x2, 0x1, 0xa}], 0x10, 0x100}, 0x90) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) accept$alg(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x13, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x38d909ab}, @ldst={0x2, 0x2, 0x2, 0x9, 0x3, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x2b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001500)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x5, 0x10, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[0xffffffffffffffff], &(0x7f0000001600)=[{0x2, 0x3, 0xa, 0xb}], 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f0000000000)='cq_reschedule\x00', r0}, 0x10) 14:37:22 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xcc, 0x0, &(0x7f0000000580)=[@free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/137, 0x89, 0x1, 0x2d}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x71, 0x0, &(0x7f00000004c0)="080a7b5b404762ec79624418617484d70a34df7813c01536a4539d63bbce6238e258ec0e7bd3d9c33456e0209d7371150e6a247c6b5d466f95dae01be49d33fc9ae785868b820da1f9aaa92de29c8bd42aef046bd5bec1ee31c847452b68cfccf901b03e103e5d0b7a60b550580a82a23d"}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r0, 0x0, 0x10001, 0x0, 0x0, 0x8bc91, 0x163722}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0xb, r0, 0x0, 0x6}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x10042, 0x0, 0x41}) 14:37:22 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xa00000000000000}) 14:37:22 executing program 1: bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:22 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xc00000000000000}) 14:37:22 executing program 3: bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:22 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xcc, 0x0, &(0x7f0000000580)=[@free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/137, 0x89, 0x1, 0x2d}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x71, 0x0, &(0x7f00000004c0)="080a7b5b404762ec79624418617484d70a34df7813c01536a4539d63bbce6238e258ec0e7bd3d9c33456e0209d7371150e6a247c6b5d466f95dae01be49d33fc9ae785868b820da1f9aaa92de29c8bd42aef046bd5bec1ee31c847452b68cfccf901b03e103e5d0b7a60b550580a82a23d"}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r0, 0x0, 0x10001, 0x0, 0x0, 0x8bc91, 0x163722}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0xb, r0, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x10042, 0x0, 0x41}) 14:37:22 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x29, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0xc7}}}, &(0x7f00000001c0)='GPL\x00', 0x7fff, 0x1000, &(0x7f0000000200)=""/4096, 0x40f00, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0xe, 0x1000, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001280)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000012c0)=[{0x1, 0x3, 0xf, 0xc}, {0x1, 0x1, 0xe, 0x3}, {0x1, 0x5, 0x1, 0x8}, {0x4, 0x2, 0xd, 0xa}, {0x2, 0x5, 0xe}, {0x4, 0x5, 0x8, 0xb}, {0x4, 0x2, 0x1, 0xa}], 0x10, 0x100}, 0x90) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) accept$alg(r1, 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x13, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x38d909ab}, @ldst={0x2, 0x2, 0x2, 0x9, 0x3, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x2b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001500)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x5, 0x10, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[0xffffffffffffffff], &(0x7f0000001600)=[{0x2, 0x3, 0xa, 0xb}], 0x10, 0x8}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f0000000000)='cq_reschedule\x00', r0}, 0x10) 14:37:22 executing program 4: r0 = socket(0x6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0x300, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x400008c) 14:37:22 executing program 1: bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:22 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xd00000000000000}) 14:37:22 executing program 3: bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:23 executing program 4: r0 = socket(0x6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0x300, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x400008c) 14:37:23 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x29, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0xc7}}}, &(0x7f00000001c0)='GPL\x00', 0x7fff, 0x1000, &(0x7f0000000200)=""/4096, 0x40f00, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0xe, 0x1000, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001280)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000012c0)=[{0x1, 0x3, 0xf, 0xc}, {0x1, 0x1, 0xe, 0x3}, {0x1, 0x5, 0x1, 0x8}, {0x4, 0x2, 0xd, 0xa}, {0x2, 0x5, 0xe}, {0x4, 0x5, 0x8, 0xb}, {0x4, 0x2, 0x1, 0xa}], 0x10, 0x100}, 0x90) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) accept$alg(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x13, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x38d909ab}, @ldst={0x2, 0x2, 0x2, 0x9, 0x3, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x2b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001500)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x5, 0x10, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[0xffffffffffffffff], &(0x7f0000001600)=[{0x2, 0x3, 0xa, 0xb}], 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f0000000000)='cq_reschedule\x00', r0}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x29, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0xc7}}}, &(0x7f00000001c0)='GPL\x00', 0x7fff, 0x1000, &(0x7f0000000200)=""/4096, 0x40f00, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0xe, 0x1000, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001280)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000012c0)=[{0x1, 0x3, 0xf, 0xc}, {0x1, 0x1, 0xe, 0x3}, {0x1, 0x5, 0x1, 0x8}, {0x4, 0x2, 0xd, 0xa}, {0x2, 0x5, 0xe}, {0x4, 0x5, 0x8, 0xb}, {0x4, 0x2, 0x1, 0xa}], 0x10, 0x100}, 0x90) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) accept$alg(r1, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x13, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x38d909ab}, @ldst={0x2, 0x2, 0x2, 0x9, 0x3, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x2b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001500)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x5, 0x10, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[0xffffffffffffffff], &(0x7f0000001600)=[{0x2, 0x3, 0xa, 0xb}], 0x10, 0x8}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f0000000000)='cq_reschedule\x00', r0}, 0x10) (async) 14:37:23 executing program 1: bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xe00000000000000}) 14:37:23 executing program 2: pipe2$9p(&(0x7f0000000000), 0x0) 14:37:23 executing program 3: bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:23 executing program 1: bpf$MAP_CREATE(0x800000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x1000000000000000}) 14:37:23 executing program 4: r0 = socket(0x6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0x300, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x400008c) 14:37:23 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'syzkaller0\x00'}}, 0x1e) 14:37:23 executing program 2: pipe2$9p(0x0, 0x800) 14:37:23 executing program 1: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:23 executing program 3: bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:24 executing program 4: r0 = socket(0x6, 0x0, 0x8c7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, &(0x7f00000001c0)={0xc}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv4_getaddr={0x38, 0x16, 0x10, 0x70bd25, 0x25dfdbfe, {0x2, 0x18, 0x80, 0xc8, r2}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000004a00000327bd7000fbdbdf250a00100057ca76f3aa8d3eb11901afd3db93a01984ffa0225b3fd1ea482f74d2c9093d75e7bf688826d0b34f1191bc9427b71eccf9d844b74a1630ab17c69e92c0dca93d4a699473f2e0cf66838ded0532ae0689b4853652475a5069cc62f9ea57e7e3e4179f182189ce871f7ed79d5b735e86f22bbbaf6a2a", @ANYRES32=r2, @ANYRES16=r3], 0x80}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 14:37:24 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'syzkaller0\x00'}}, 0x1e) 14:37:24 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x1100000000000000}) 14:37:24 executing program 2: pipe2$9p(0x0, 0x800) 14:37:24 executing program 1: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:24 executing program 4: r0 = socket(0x6, 0x0, 0x8c7) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, &(0x7f00000001c0)={0xc}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv4_getaddr={0x38, 0x16, 0x10, 0x70bd25, 0x25dfdbfe, {0x2, 0x18, 0x80, 0xc8, r2}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000004a00000327bd7000fbdbdf250a00100057ca76f3aa8d3eb11901afd3db93a01984ffa0225b3fd1ea482f74d2c9093d75e7bf688826d0b34f1191bc9427b71eccf9d844b74a1630ab17c69e92c0dca93d4a699473f2e0cf66838ded0532ae0689b4853652475a5069cc62f9ea57e7e3e4179f182189ce871f7ed79d5b735e86f22bbbaf6a2a", @ANYRES32=r2, @ANYRES16=r3], 0x80}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 14:37:24 executing program 3: bpf$MAP_CREATE(0x800000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:24 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'syzkaller0\x00'}}, 0x1e) 14:37:24 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x1200000000000000}) 14:37:24 executing program 2: pipe2$9p(0x0, 0x800) 14:37:24 executing program 4: r0 = socket(0x6, 0x0, 0x8c7) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, &(0x7f00000001c0)={0xc}) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r4, 0x3b80, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv4_getaddr={0x38, 0x16, 0x10, 0x70bd25, 0x25dfdbfe, {0x2, 0x18, 0x80, 0xc8, r2}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000004a00000327bd7000fbdbdf250a00100057ca76f3aa8d3eb11901afd3db93a01984ffa0225b3fd1ea482f74d2c9093d75e7bf688826d0b34f1191bc9427b71eccf9d844b74a1630ab17c69e92c0dca93d4a699473f2e0cf66838ded0532ae0689b4853652475a5069cc62f9ea57e7e3e4179f182189ce871f7ed79d5b735e86f22bbbaf6a2a", @ANYRES32=r2, @ANYRES16=r3], 0x80}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 14:37:24 executing program 1: bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:24 executing program 3: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:24 executing program 2: pipe2$9p(0x0, 0x0) 14:37:24 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1f, 0x10, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x0, 0x1, 0x2, 0x9, 0x8, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='GPL\x00', 0xffffffff, 0xea, &(0x7f0000001500)=""/234, 0x40f00, 0x10, '\x00', r6, 0x1d, r7, 0x8, &(0x7f00000016c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x0, 0x1, 0xffff}, 0x10, 0x0, r4, 0x6, &(0x7f0000001740)=[0xffffffffffffffff, r8], &(0x7f0000001780)=[{0x1, 0x1, 0x4, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x9, 0x5, 0xc, 0x6}, {0x0, 0x2, 0x7, 0x3}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x581}, 0x90) 14:37:24 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x2500000000000000}) 14:37:25 executing program 3: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:25 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000140)={0x38, 0x8, 0xffffffffffffffff, 0x0, 0x7, 0x26c9fc, 0xcd, &(0x7f0000000040)="b1c783ba37ef04ac019c551529595cc094fb7744b622a45eefee11513a045347363aa4ead6944ef1e801c9629ae12978e75caa0421ca547207d61dbd20d76cc5a25a4715a6d8d18672ebede9e5b0e27e33097f4044efec52271ff6f4919c43bd69e79f184f46c87886a7cf374b9681b6dac35858eb5539ba885e28bf6627f1fe845d2634c633f4ffb938560996035ecbae1a28c516b5aa5c72addbc499437c31b365db00eb77d1b3047850e415135c8b5c3fe5b19fad24e6b338169082dd2ee2f714285f20480dbd82a14816c1", 0x10000}) socket(0x6, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 14:37:25 executing program 2: pipe2$9p(0x0, 0x0) 14:37:25 executing program 1: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:25 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x4000000000000000}) 14:37:25 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, 0x0) (async) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1f, 0x10, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x0, 0x1, 0x2, 0x9, 0x8, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='GPL\x00', 0xffffffff, 0xea, &(0x7f0000001500)=""/234, 0x40f00, 0x10, '\x00', r6, 0x1d, r7, 0x8, &(0x7f00000016c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x0, 0x1, 0xffff}, 0x10, 0x0, r4, 0x6, &(0x7f0000001740)=[0xffffffffffffffff, r8], &(0x7f0000001780)=[{0x1, 0x1, 0x4, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x9, 0x5, 0xc, 0x6}, {0x0, 0x2, 0x7, 0x3}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x581}, 0x90) 14:37:25 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000140)={0x38, 0x8, 0xffffffffffffffff, 0x0, 0x7, 0x26c9fc, 0xcd, &(0x7f0000000040)="b1c783ba37ef04ac019c551529595cc094fb7744b622a45eefee11513a045347363aa4ead6944ef1e801c9629ae12978e75caa0421ca547207d61dbd20d76cc5a25a4715a6d8d18672ebede9e5b0e27e33097f4044efec52271ff6f4919c43bd69e79f184f46c87886a7cf374b9681b6dac35858eb5539ba885e28bf6627f1fe845d2634c633f4ffb938560996035ecbae1a28c516b5aa5c72addbc499437c31b365db00eb77d1b3047850e415135c8b5c3fe5b19fad24e6b338169082dd2ee2f714285f20480dbd82a14816c1", 0x10000}) (async) socket(0x6, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (rerun: 64) 14:37:25 executing program 3: bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:25 executing program 1: bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:25 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1f, 0x10, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x0, 0x1, 0x2, 0x9, 0x8, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='GPL\x00', 0xffffffff, 0xea, &(0x7f0000001500)=""/234, 0x40f00, 0x10, '\x00', r6, 0x1d, r7, 0x8, &(0x7f00000016c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x0, 0x1, 0xffff}, 0x10, 0x0, r4, 0x6, &(0x7f0000001740)=[0xffffffffffffffff, r8], &(0x7f0000001780)=[{0x1, 0x1, 0x4, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x9, 0x5, 0xc, 0x6}, {0x0, 0x2, 0x7, 0x3}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x581}, 0x90) 14:37:25 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x5c00000000000000}) 14:37:25 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1f, 0x10, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x0, 0x1, 0x2, 0x9, 0x8, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='GPL\x00', 0xffffffff, 0xea, &(0x7f0000001500)=""/234, 0x40f00, 0x10, '\x00', r6, 0x1d, r7, 0x8, &(0x7f00000016c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x0, 0x1, 0xffff}, 0x10, 0x0, r4, 0x6, &(0x7f0000001740)=[0xffffffffffffffff, r8], &(0x7f0000001780)=[{0x1, 0x1, 0x4, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x9, 0x5, 0xc, 0x6}, {0x0, 0x2, 0x7, 0x3}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x581}, 0x90) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1f, 0x10, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x0, 0x1, 0x2, 0x9, 0x8, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='GPL\x00', 0xffffffff, 0xea, &(0x7f0000001500)=""/234, 0x40f00, 0x10, '\x00', r6, 0x1d, r7, 0x8, &(0x7f00000016c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x0, 0x1, 0xffff}, 0x10, 0x0, r4, 0x6, &(0x7f0000001740)=[0xffffffffffffffff, r8], &(0x7f0000001780)=[{0x1, 0x1, 0x4, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x9, 0x5, 0xc, 0x6}, {0x0, 0x2, 0x7, 0x3}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x581}, 0x90) (async) 14:37:26 executing program 3: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:26 executing program 1: bpf$MAP_CREATE(0xe00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:26 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xffffff7f00000000}) 14:37:26 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1f, 0x10, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x0, 0x1, 0x2, 0x9, 0x8, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='GPL\x00', 0xffffffff, 0xea, &(0x7f0000001500)=""/234, 0x40f00, 0x10, '\x00', r6, 0x1d, r7, 0x8, &(0x7f00000016c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x0, 0x1, 0xffff}, 0x10, 0x0, r4, 0x6, &(0x7f0000001740)=[0xffffffffffffffff, r8], &(0x7f0000001780)=[{0x1, 0x1, 0x4, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x9, 0x5, 0xc, 0x6}, {0x0, 0x2, 0x7, 0x3}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x581}, 0x90) 14:37:26 executing program 1: bpf$MAP_CREATE(0xf00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:26 executing program 3: bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000140)={0x38, 0x8, 0xffffffffffffffff, 0x0, 0x7, 0x26c9fc, 0xcd, &(0x7f0000000040)="b1c783ba37ef04ac019c551529595cc094fb7744b622a45eefee11513a045347363aa4ead6944ef1e801c9629ae12978e75caa0421ca547207d61dbd20d76cc5a25a4715a6d8d18672ebede9e5b0e27e33097f4044efec52271ff6f4919c43bd69e79f184f46c87886a7cf374b9681b6dac35858eb5539ba885e28bf6627f1fe845d2634c633f4ffb938560996035ecbae1a28c516b5aa5c72addbc499437c31b365db00eb77d1b3047850e415135c8b5c3fe5b19fad24e6b338169082dd2ee2f714285f20480dbd82a14816c1", 0x10000}) (async) socket(0x6, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 14:37:26 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0xffffffffff600000}) 14:37:26 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) accept$alg(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) socketpair(0x5, 0xa, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000000)=0xfffffffc, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:37:26 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r8, 0x3b80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1f, 0x10, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x0, 0x1, 0x2, 0x9, 0x8, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='GPL\x00', 0xffffffff, 0xea, &(0x7f0000001500)=""/234, 0x40f00, 0x10, '\x00', r6, 0x1d, r7, 0x8, &(0x7f00000016c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x0, 0x1, 0xffff}, 0x10, 0x0, r4, 0x6, &(0x7f0000001740)=[0xffffffffffffffff, r8], &(0x7f0000001780)=[{0x1, 0x1, 0x4, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x9, 0x5, 0xc, 0x6}, {0x0, 0x2, 0x7, 0x3}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x581}, 0x90) 14:37:26 executing program 1: bpf$MAP_CREATE(0x1000000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:26 executing program 3: bpf$MAP_CREATE(0xe00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:27 executing program 1: bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:27 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0}) 14:37:27 executing program 4: socket(0x6, 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x2) 14:37:27 executing program 3: bpf$MAP_CREATE(0xf00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:27 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r6, 0x3b80, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, 0x0) 14:37:27 executing program 1: bpf$MAP_CREATE(0x1200000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:27 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2}) 14:37:27 executing program 3: bpf$MAP_CREATE(0x1000000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:27 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) accept$alg(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) socketpair(0x5, 0xa, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000000)=0xfffffffc, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) accept$alg(r0, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) socketpair(0x5, 0xa, 0x9, &(0x7f0000000080)) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) (async) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000000)=0xfffffffc, 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) 14:37:27 executing program 4: socket(0x6, 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x2) socket(0x6, 0x0, 0x0) (async) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x2) (async) 14:37:27 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r6, 0x3b80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 14:37:28 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3}) 14:37:28 executing program 3: bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:28 executing program 1: bpf$MAP_CREATE(0x1300000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:28 executing program 4: socket(0x6, 0x0, 0x0) (async) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x2) 14:37:28 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r6, 0x3b80, 0x0) 14:37:28 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) accept$alg(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) socketpair(0x5, 0xa, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000000)=0xfffffffc, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) accept$alg(r0, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) socketpair(0x5, 0xa, 0x9, &(0x7f0000000080)) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) (async) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000000)=0xfffffffc, 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) 14:37:28 executing program 3: bpf$MAP_CREATE(0x1200000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:28 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}) 14:37:28 executing program 4: socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f00000002c0)={0x8}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@ipmr_delroute={0x200, 0x19, 0x800, 0x70bd28, 0x25dfdbff, {0x80, 0x80, 0x10, 0x1, 0x0, 0x2, 0x36, 0x2, 0x2380}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_METRICS={0xbd, 0x8, 0x0, 0x1, "15180ef8c34d2377342300e5a6b0282026c241bce85d30fda8c0b40de46980aa0c446d13bb74bc2b91eff947bcc75c9dfbc30af73e6ec066b0cd6e09554c230b7e977fa2bb7fae5ff65c79231738ae6d24b2c58b80c2f8248e8b9b125a93a7e53aae249d1b16c48e6bb9eca934366e0521189b412d16851765d32e16d58a61c5028171c5d6b0df66f021ec8e60f85801aa0ed5cb4f1e7ba80339337c1eadd487ac82eb76ede0e2ff3f0ceef3b52a6a9ff168450e39ae18c395"}, @RTA_METRICS={0xf7, 0x8, 0x0, 0x1, "89f6504487afbf4cc41f5e916b273d643a5b1b6e0b8b337256289345b15187f8560d70001187c7ed84c18232ed7f61d19342843a89acb6c23321b402c178e19b2e1c9f2ed6b80b02b86d1db899d7467a81affd065e660ab71766212ea7549dd8351b3e49f93f85470fc79cf0a583721abcc522259da0e10706e5e5b0764cf97f931cee0f977cd8208feb9688045b7dc5f85d0d742dade26d0ae7555b5914ecc8eff806d8c96292157e1e1311ddd39e78fb53c90c73268074be88f93d5cfc3b2ed3446a3ce13c7d11a829fc7b9f7548c47d13f1d71473492f6b2b0fc0d458b809ae3bd94fb211d5fee25d625bb093800a54ca52"}, @RTA_MULTIPATH={0xc, 0x9, {0x9f22, 0x10, 0x1}}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x200}}, 0x4001) 14:37:28 executing program 1: bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:29 executing program 3: bpf$MAP_CREATE(0x1300000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:29 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 14:37:29 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 14:37:29 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5}) 14:37:29 executing program 4: socket(0x6, 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f00000002c0)={0x8}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@ipmr_delroute={0x200, 0x19, 0x800, 0x70bd28, 0x25dfdbff, {0x80, 0x80, 0x10, 0x1, 0x0, 0x2, 0x36, 0x2, 0x2380}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_METRICS={0xbd, 0x8, 0x0, 0x1, "15180ef8c34d2377342300e5a6b0282026c241bce85d30fda8c0b40de46980aa0c446d13bb74bc2b91eff947bcc75c9dfbc30af73e6ec066b0cd6e09554c230b7e977fa2bb7fae5ff65c79231738ae6d24b2c58b80c2f8248e8b9b125a93a7e53aae249d1b16c48e6bb9eca934366e0521189b412d16851765d32e16d58a61c5028171c5d6b0df66f021ec8e60f85801aa0ed5cb4f1e7ba80339337c1eadd487ac82eb76ede0e2ff3f0ceef3b52a6a9ff168450e39ae18c395"}, @RTA_METRICS={0xf7, 0x8, 0x0, 0x1, "89f6504487afbf4cc41f5e916b273d643a5b1b6e0b8b337256289345b15187f8560d70001187c7ed84c18232ed7f61d19342843a89acb6c23321b402c178e19b2e1c9f2ed6b80b02b86d1db899d7467a81affd065e660ab71766212ea7549dd8351b3e49f93f85470fc79cf0a583721abcc522259da0e10706e5e5b0764cf97f931cee0f977cd8208feb9688045b7dc5f85d0d742dade26d0ae7555b5914ecc8eff806d8c96292157e1e1311ddd39e78fb53c90c73268074be88f93d5cfc3b2ed3446a3ce13c7d11a829fc7b9f7548c47d13f1d71473492f6b2b0fc0d458b809ae3bd94fb211d5fee25d625bb093800a54ca52"}, @RTA_MULTIPATH={0xc, 0x9, {0x9f22, 0x10, 0x1}}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x200}}, 0x4001) (rerun: 64) 14:37:29 executing program 1: bpf$MAP_CREATE(0x1500000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:29 executing program 3: bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:29 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) 14:37:29 executing program 4: socket(0x6, 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f00000002c0)={0x8}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@ipmr_delroute={0x200, 0x19, 0x800, 0x70bd28, 0x25dfdbff, {0x80, 0x80, 0x10, 0x1, 0x0, 0x2, 0x36, 0x2, 0x2380}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_METRICS={0xbd, 0x8, 0x0, 0x1, "15180ef8c34d2377342300e5a6b0282026c241bce85d30fda8c0b40de46980aa0c446d13bb74bc2b91eff947bcc75c9dfbc30af73e6ec066b0cd6e09554c230b7e977fa2bb7fae5ff65c79231738ae6d24b2c58b80c2f8248e8b9b125a93a7e53aae249d1b16c48e6bb9eca934366e0521189b412d16851765d32e16d58a61c5028171c5d6b0df66f021ec8e60f85801aa0ed5cb4f1e7ba80339337c1eadd487ac82eb76ede0e2ff3f0ceef3b52a6a9ff168450e39ae18c395"}, @RTA_METRICS={0xf7, 0x8, 0x0, 0x1, "89f6504487afbf4cc41f5e916b273d643a5b1b6e0b8b337256289345b15187f8560d70001187c7ed84c18232ed7f61d19342843a89acb6c23321b402c178e19b2e1c9f2ed6b80b02b86d1db899d7467a81affd065e660ab71766212ea7549dd8351b3e49f93f85470fc79cf0a583721abcc522259da0e10706e5e5b0764cf97f931cee0f977cd8208feb9688045b7dc5f85d0d742dade26d0ae7555b5914ecc8eff806d8c96292157e1e1311ddd39e78fb53c90c73268074be88f93d5cfc3b2ed3446a3ce13c7d11a829fc7b9f7548c47d13f1d71473492f6b2b0fc0d458b809ae3bd94fb211d5fee25d625bb093800a54ca52"}, @RTA_MULTIPATH={0xc, 0x9, {0x9f22, 0x10, 0x1}}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x200}}, 0x4001) 14:37:29 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6}) 14:37:29 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0xd7, 0x91, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, 0x8, 0x7800, 0x100, 0xe40a}}) 14:37:29 executing program 3: bpf$MAP_CREATE(0x1500000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:29 executing program 1: bpf$MAP_CREATE(0x1600000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:29 executing program 4: socket(0x6, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x400) 14:37:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7}) 14:37:30 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 14:37:30 executing program 3: bpf$MAP_CREATE(0x1600000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:30 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, 0x0) 14:37:30 executing program 1: bpf$MAP_CREATE(0x1700000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:30 executing program 4: socket(0x6, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x400) socket(0x6, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x400) (async) 14:37:30 executing program 5: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10c, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}, @free_buffer, @dead_binder_done, @free_buffer, @free_buffer, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x4ef301bf595404a7, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/158, 0x9e, 0x2, 0x9}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x2, 0x2, 0x2a}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @request_death, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x1, 0x8}, @fda={0x66646185, 0x9, 0x0, 0xb}}, &(0x7f0000000300)={0x0, 0x18, 0x38}}, 0x400}], 0x7f, 0x0, &(0x7f0000000480)="5d5b09bdbf148e1f91044324d8dcc15c3a1b19b06d7c70a01156f3b218df6d149f227ca5de90615c1c67231ed224261a34b06dd3ef5489c4aa5f38577fb503b5ccde7fa20561257f923002cd0be43eab7cfd4926dbda883a4ffde3770dd4d10c6c2cc26ca6922c70bc474b2d0b5ce7acc7168b5478b9f132417a4f992091a4"}) 14:37:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8}) 14:37:30 executing program 3: bpf$MAP_CREATE(0x1700000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:30 executing program 1: bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:30 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 14:37:30 executing program 4: socket(0x6, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x400) 14:37:30 executing program 1: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:30 executing program 3: bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x9}) 14:37:30 executing program 5: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10c, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}, @free_buffer, @dead_binder_done, @free_buffer, @free_buffer, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x4ef301bf595404a7, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/158, 0x9e, 0x2, 0x9}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x2, 0x2, 0x2a}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @request_death, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x1, 0x8}, @fda={0x66646185, 0x9, 0x0, 0xb}}, &(0x7f0000000300)={0x0, 0x18, 0x38}}, 0x400}], 0x7f, 0x0, &(0x7f0000000480)="5d5b09bdbf148e1f91044324d8dcc15c3a1b19b06d7c70a01156f3b218df6d149f227ca5de90615c1c67231ed224261a34b06dd3ef5489c4aa5f38577fb503b5ccde7fa20561257f923002cd0be43eab7cfd4926dbda883a4ffde3770dd4d10c6c2cc26ca6922c70bc474b2d0b5ce7acc7168b5478b9f132417a4f992091a4"}) 14:37:31 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14:37:31 executing program 1: bpf$MAP_CREATE(0x1a00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:31 executing program 3: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:31 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x294003, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000013c0)={0xb8, 0x0, &(0x7f0000001240)=[@acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x100a, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001180)={@flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x2, 0x2c}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000001200)={0x0, 0x18, 0x40}}, 0x40}], 0x96, 0x0, &(0x7f0000001300)="214fadfb91afd7b05dcd1ec2c9cae2a695208dbf678420626ba24c28d89af116ec28cafd81c8ece8b0d805ca5af4c3e24db9406795af5be3f83d011f47c2ba568be8e9932eafc4153fb1c6e3253fd2ddb5824c1bb57c0fd2055189dda36171515f848779c056e4dba15ed6037aacd311cf8fb2d0f28ff26aaab2e3ec46fadaf56aaff1dcaea2e65c58e9473e0e109db211b7a9856f3a"}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r5}) socket(0x6, 0x80000, 0xfffffffe) 14:37:31 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa}) 14:37:31 executing program 5: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) (async) write$cgroup_int(r2, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10c, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}, @free_buffer, @dead_binder_done, @free_buffer, @free_buffer, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x4ef301bf595404a7, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/158, 0x9e, 0x2, 0x9}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x2, 0x2, 0x2a}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done={0x40106309, 0x1}, @request_death, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x1, 0x8}, @fda={0x66646185, 0x9, 0x0, 0xb}}, &(0x7f0000000300)={0x0, 0x18, 0x38}}, 0x400}], 0x7f, 0x0, &(0x7f0000000480)="5d5b09bdbf148e1f91044324d8dcc15c3a1b19b06d7c70a01156f3b218df6d149f227ca5de90615c1c67231ed224261a34b06dd3ef5489c4aa5f38577fb503b5ccde7fa20561257f923002cd0be43eab7cfd4926dbda883a4ffde3770dd4d10c6c2cc26ca6922c70bc474b2d0b5ce7acc7168b5478b9f132417a4f992091a4"}) 14:37:31 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r3, 0x3b80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @exit, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000012c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4], &(0x7f0000001300)=[{0x5, 0x4, 0x5, 0x8}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x2, 0xe, 0x7}], 0x10, 0x10001}, 0x90) 14:37:31 executing program 1: bpf$MAP_CREATE(0x1b00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:31 executing program 3: bpf$MAP_CREATE(0x1a00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:31 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x294003, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000013c0)={0xb8, 0x0, &(0x7f0000001240)=[@acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x100a, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001180)={@flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x2, 0x2c}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000001200)={0x0, 0x18, 0x40}}, 0x40}], 0x96, 0x0, &(0x7f0000001300)="214fadfb91afd7b05dcd1ec2c9cae2a695208dbf678420626ba24c28d89af116ec28cafd81c8ece8b0d805ca5af4c3e24db9406795af5be3f83d011f47c2ba568be8e9932eafc4153fb1c6e3253fd2ddb5824c1bb57c0fd2055189dda36171515f848779c056e4dba15ed6037aacd311cf8fb2d0f28ff26aaab2e3ec46fadaf56aaff1dcaea2e65c58e9473e0e109db211b7a9856f3a"}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r5}) (async) socket(0x6, 0x80000, 0xfffffffe) 14:37:31 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb}) 14:37:32 executing program 1: bpf$MAP_CREATE(0x1c00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:32 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000000)=0x4) 14:37:32 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) 14:37:32 executing program 3: bpf$MAP_CREATE(0x1b00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:32 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xc}) 14:37:32 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x294003, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000013c0)={0xb8, 0x0, &(0x7f0000001240)=[@acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x100a, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001180)={@flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x2, 0x2c}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000001200)={0x0, 0x18, 0x40}}, 0x40}], 0x96, 0x0, &(0x7f0000001300)="214fadfb91afd7b05dcd1ec2c9cae2a695208dbf678420626ba24c28d89af116ec28cafd81c8ece8b0d805ca5af4c3e24db9406795af5be3f83d011f47c2ba568be8e9932eafc4153fb1c6e3253fd2ddb5824c1bb57c0fd2055189dda36171515f848779c056e4dba15ed6037aacd311cf8fb2d0f28ff26aaab2e3ec46fadaf56aaff1dcaea2e65c58e9473e0e109db211b7a9856f3a"}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r5}) socket(0x6, 0x80000, 0xfffffffe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x294003, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000880)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000013c0)={0xb8, 0x0, &(0x7f0000001240)=[@acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x100a, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001180)={@flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x2, 0x2c}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000001200)={0x0, 0x18, 0x40}}, 0x40}], 0x96, 0x0, &(0x7f0000001300)="214fadfb91afd7b05dcd1ec2c9cae2a695208dbf678420626ba24c28d89af116ec28cafd81c8ece8b0d805ca5af4c3e24db9406795af5be3f83d011f47c2ba568be8e9932eafc4153fb1c6e3253fd2ddb5824c1bb57c0fd2055189dda36171515f848779c056e4dba15ed6037aacd311cf8fb2d0f28ff26aaab2e3ec46fadaf56aaff1dcaea2e65c58e9473e0e109db211b7a9856f3a"}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r5}) (async) socket(0x6, 0x80000, 0xfffffffe) (async) 14:37:32 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000000)=0x4) (async) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000000)=0x4) 14:37:32 executing program 1: bpf$MAP_CREATE(0x1d00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:32 executing program 3: bpf$MAP_CREATE(0x1c00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:32 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xd}) 14:37:32 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, 0x0) 14:37:32 executing program 1: bpf$MAP_CREATE(0x1e00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:32 executing program 3: bpf$MAP_CREATE(0x1d00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:32 executing program 4: socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x488480, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xa8, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/119, 0x77, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}, 0x40}, @enter_looper, @increfs, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x3}, @request_death], 0x89, 0x0, &(0x7f0000000240)="5b15088eb3ad49e365993485e59b29ac32d673c3057a5c88c00a3b8cbd7f2c50f8c43f7d1bdfba2c2caa84612d985af39e8dbdaa1937975767544844b90dd2bf55d6b1e70d32c3607f0f6d5282795c4ee013a5acd2b5cef4ee7c66c8bd8b6b2b4207d7992aa06fb46ec3ee6169bbed2fbeb3eab5f2b2b8ee532d6ef6d8ec0ee12f91982d9c48ea10af"}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x10000, 0x6, 0x52b, 0x3ff, 0x7fffffff, 0x5}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 14:37:33 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000000)=0x4) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000000)=0x4) (async) 14:37:33 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xe}) 14:37:33 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 14:37:33 executing program 1: bpf$MAP_CREATE(0x1f00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:33 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb4}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x400080c}, 0x0) 14:37:33 executing program 3: bpf$MAP_CREATE(0x1e00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:33 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x10}) 14:37:33 executing program 4: socket(0x6, 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x488480, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xa8, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/119, 0x77, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}, 0x40}, @enter_looper, @increfs, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x3}, @request_death], 0x89, 0x0, &(0x7f0000000240)="5b15088eb3ad49e365993485e59b29ac32d673c3057a5c88c00a3b8cbd7f2c50f8c43f7d1bdfba2c2caa84612d985af39e8dbdaa1937975767544844b90dd2bf55d6b1e70d32c3607f0f6d5282795c4ee013a5acd2b5cef4ee7c66c8bd8b6b2b4207d7992aa06fb46ec3ee6169bbed2fbeb3eab5f2b2b8ee532d6ef6d8ec0ee12f91982d9c48ea10af"}) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x10000, 0x6, 0x52b, 0x3ff, 0x7fffffff, 0x5}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 14:37:33 executing program 1: bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:33 executing program 3: bpf$MAP_CREATE(0x1f00000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:33 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb4}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x400080c}, 0x0) 14:37:33 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r1, 0x3b80, 0x0) 14:37:33 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x11}) 14:37:33 executing program 4: socket(0x6, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x488480, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xa8, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/119, 0x77, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}, 0x40}, @enter_looper, @increfs, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x3}, @request_death], 0x89, 0x0, &(0x7f0000000240)="5b15088eb3ad49e365993485e59b29ac32d673c3057a5c88c00a3b8cbd7f2c50f8c43f7d1bdfba2c2caa84612d985af39e8dbdaa1937975767544844b90dd2bf55d6b1e70d32c3607f0f6d5282795c4ee013a5acd2b5cef4ee7c66c8bd8b6b2b4207d7992aa06fb46ec3ee6169bbed2fbeb3eab5f2b2b8ee532d6ef6d8ec0ee12f91982d9c48ea10af"}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x10000, 0x6, 0x52b, 0x3ff, 0x7fffffff, 0x5}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket(0x6, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x488480, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xa8, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/119, 0x77, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}, 0x40}, @enter_looper, @increfs, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x3}, @request_death], 0x89, 0x0, &(0x7f0000000240)="5b15088eb3ad49e365993485e59b29ac32d673c3057a5c88c00a3b8cbd7f2c50f8c43f7d1bdfba2c2caa84612d985af39e8dbdaa1937975767544844b90dd2bf55d6b1e70d32c3607f0f6d5282795c4ee013a5acd2b5cef4ee7c66c8bd8b6b2b4207d7992aa06fb46ec3ee6169bbed2fbeb3eab5f2b2b8ee532d6ef6d8ec0ee12f91982d9c48ea10af"}) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x10000, 0x6, 0x52b, 0x3ff, 0x7fffffff, 0x5}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) 14:37:34 executing program 3: bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:34 executing program 1: bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:34 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 14:37:34 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x12}) 14:37:34 executing program 4: r0 = socket(0x6, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x1000, 0x2) r1 = socket(0x1f, 0x800, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) socketpair(0x1a, 0x3, 0xfffffff9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) r6 = socket(0x23, 0x419d677ec83a2458, 0x9) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x20004800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r8, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r9 = socket(0xf, 0x1, 0x800) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r7) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r10, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x97}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xa8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048084}, 0x40) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x466412d8b5600103, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 14:37:34 executing program 3: bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404}, 0x48) 14:37:34 executing program 1: bpf$MAP_CREATE(0x2200000000000000, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:37:34 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) [ 2649.421495][T32083] ===================================================== [ 2649.428970][T32083] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x364/0x2520 [ 2649.436722][T32083] _copy_to_iter+0x364/0x2520 [ 2649.441871][T32083] simple_copy_to_iter+0x68/0xa0 [ 2649.447007][T32083] __skb_datagram_iter+0x123/0xdc0 [ 2649.452521][T32083] skb_copy_datagram_iter+0x5c/0x200 [ 2649.458077][T32083] netlink_recvmsg+0x432/0x1600 [ 2649.463776][T32083] __sys_recvfrom+0x505/0x810 [ 2649.468689][T32083] __x64_sys_recvfrom+0x126/0x1d0 [ 2649.474147][T32083] do_syscall_64+0x44/0x110 [ 2649.478862][T32083] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2649.485117][T32083] [ 2649.487555][T32083] Uninit was created at: [ 2649.499333][T32083] slab_post_alloc_hook+0x129/0xa70 [ 2649.505541][T32083] kmem_cache_alloc_node+0x5e9/0xb10 [ 2649.511158][T32083] kmalloc_reserve+0x13d/0x4a0 [ 2649.516119][T32083] __alloc_skb+0x318/0x740 [ 2649.520932][T32083] tipc_get_err_tlv+0x83/0x5a0 [ 2649.525984][T32083] tipc_nl_compat_recv+0x10d8/0x15f0 [ 2649.531594][T32083] genl_rcv_msg+0x11ec/0x1290 [ 2649.536506][T32083] netlink_rcv_skb+0x371/0x650 [ 2649.541584][T32083] genl_rcv+0x40/0x60 [ 2649.545764][T32083] netlink_unicast+0xf47/0x1250 [ 2649.551135][T32083] netlink_sendmsg+0x1238/0x13d0 [ 2649.556295][T32083] ____sys_sendmsg+0x9c2/0xd60 [ 2649.561409][T32083] ___sys_sendmsg+0x28d/0x3c0 [ 2649.566300][T32083] __x64_sys_sendmsg+0x307/0x490 [ 2649.571594][T32083] do_syscall_64+0x44/0x110 [ 2649.576275][T32083] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2649.582518][T32083] [ 2649.584951][T32083] Bytes 34-35 of 36 are uninitialized [ 2649.590581][T32083] Memory access of size 36 starts at ffff8881229e2c80 [ 2649.604248][T32083] Data copied to user address 00007fe4d33f30a0 [ 2649.611885][T32083] [ 2649.614328][T32083] CPU: 1 PID: 32083 Comm: syz-executor.4 Not tainted 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2649.624785][T32083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2649.635136][T32083] ===================================================== [ 2649.642463][T32083] Disabling lock debugging due to kernel taint [ 2649.648729][T32083] Kernel panic - not syncing: kmsan.panic set ... [ 2649.655275][T32083] CPU: 1 PID: 32083 Comm: syz-executor.4 Tainted: G B 6.6.0-syzkaller-16176-g1b907d050735 #0 [ 2649.667031][T32083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2649.677264][T32083] Call Trace: [ 2649.680682][T32083] [ 2649.683737][T32083] dump_stack_lvl+0x1bf/0x240 [ 2649.688610][T32083] dump_stack+0x1e/0x20 [ 2649.693002][T32083] panic+0x4de/0xc90 [ 2649.697126][T32083] ? add_taint+0x108/0x1a0 [ 2649.701829][T32083] kmsan_report+0x2d0/0x2d0 [ 2649.706586][T32083] ? do_syscall_64+0x44/0x110 [ 2649.711460][T32083] ? kmsan_internal_check_memory+0x476/0x530 [ 2649.717676][T32083] ? kmsan_copy_to_user+0xd3/0xf0 [ 2649.722944][T32083] ? _copy_to_iter+0x364/0x2520 [ 2649.727975][T32083] ? simple_copy_to_iter+0x68/0xa0 [ 2649.733274][T32083] ? __skb_datagram_iter+0x123/0xdc0 [ 2649.738767][T32083] ? skb_copy_datagram_iter+0x5c/0x200 [ 2649.744514][T32083] ? netlink_recvmsg+0x432/0x1600 [ 2649.749881][T32083] ? __sys_recvfrom+0x505/0x810 [ 2649.754987][T32083] ? __x64_sys_recvfrom+0x126/0x1d0 [ 2649.760424][T32083] ? do_syscall_64+0x44/0x110 [ 2649.765367][T32083] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2649.771644][T32083] ? filter_irq_stacks+0x60/0x1a0 [ 2649.776868][T32083] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2649.783345][T32083] ? kmsan_internal_poison_memory+0x82/0xa0 [ 2649.789465][T32083] ? kmsan_internal_poison_memory+0x49/0xa0 [ 2649.795582][T32083] ? kmsan_slab_free+0xd1/0x130 [ 2649.800656][T32083] ? kmem_cache_free+0x66f/0x1250 [ 2649.805868][T32083] ? __kfree_skb+0x1f8/0x250 [ 2649.810672][T32083] ? consume_skb+0xa8/0x2d0 [ 2649.815479][T32083] ? netlink_unicast+0xf58/0x1250 [ 2649.820716][T32083] ? netlink_sendmsg+0x1238/0x13d0 [ 2649.826128][T32083] ? __sys_sendto+0x781/0xa30 [ 2649.831036][T32083] ? __x64_sys_sendto+0x125/0x1c0 [ 2649.836258][T32083] ? do_syscall_64+0x44/0x110 [ 2649.841119][T32083] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2649.847409][T32083] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2649.853489][T32083] kmsan_internal_check_memory+0x476/0x530 [ 2649.859536][T32083] kmsan_copy_to_user+0xd3/0xf0 [ 2649.864614][T32083] ? should_fail_usercopy+0x2e/0x40 [ 2649.870092][T32083] _copy_to_iter+0x364/0x2520 [ 2649.874986][T32083] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2649.881053][T32083] ? __skb_try_recv_from_queue+0x62f/0xcd0 [ 2649.887074][T32083] simple_copy_to_iter+0x68/0xa0 [ 2649.892194][T32083] __skb_datagram_iter+0x123/0xdc0 [ 2649.897509][T32083] ? skb_copy_datagram_iter+0x200/0x200 [ 2649.903293][T32083] skb_copy_datagram_iter+0x5c/0x200 [ 2649.908794][T32083] netlink_recvmsg+0x432/0x1600 [ 2649.913900][T32083] ? netlink_sendmsg+0x13d0/0x13d0 [ 2649.919240][T32083] __sys_recvfrom+0x505/0x810 [ 2649.924142][T32083] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2649.930235][T32083] ? xfd_validate_state+0x89/0x210 [ 2649.935624][T32083] __x64_sys_recvfrom+0x126/0x1d0 [ 2649.940931][T32083] do_syscall_64+0x44/0x110 [ 2649.945633][T32083] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2649.951734][T32083] RIP: 0033:0x7fe4d267e714 [ 2649.956307][T32083] Code: 89 4c 24 1c e8 dd 51 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 29 52 02 00 48 8b 04 [ 2649.976157][T32083] RSP: 002b:00007fe4d33f2f70 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2649.984782][T32083] RAX: ffffffffffffffda RBX: 00007fe4d33f3050 RCX: 00007fe4d267e714 [ 2649.992920][T32083] RDX: 0000000000001000 RSI: 00007fe4d33f30a0 RDI: 0000000000000005 [ 2650.001029][T32083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2650.009140][T32083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2650.017302][T32083] R13: 00007fe4d33f3008 R14: 00007fe4d33f30a0 R15: 0000000000000000 [ 2650.025447][T32083] [ 2650.028924][T32083] Kernel Offset: disabled [ 2650.033319][T32083] Rebooting in 86400 seconds..