ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r4}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:42 executing program 5: r0 = shmget(0x2, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 05:56:42 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]}) getgid() (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000001440)={&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001340)=""/112, 0x70}], 0x1, &(0x7f0000001400)=""/2, 0x2}, 0x40000162) 05:56:42 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x6000)=nil, 0x7000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x9, 0x0, 0xfffff801, 0xdededede}) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:42 executing program 4: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10420, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscachp2000.u,nodevmap,cache=none,access=client,mmap,obj_user={,subj_role=/,defcontext=sysadm_u,mask=^MAY_READ,\x00']) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000480)=""/1, 0x1}], 0x4}, 0x2001) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x3, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) pipe2$9p(&(0x7f0000000580), 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ff2000/0xc000)=nil}) 05:56:42 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) (async) shmat(r0, &(0x7f0000ffa000/0x6000)=nil, 0x7000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 05:56:42 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x140011, 0xffffffffffffffff, 0x8) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) 05:56:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x80100) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x124010, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}, {@cachetag={'cachetag', 0x3d, ')*#/{\xe4/\x96'}}]}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400) (async) syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x80100) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe8) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x124010, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}, {@cachetag={'cachetag', 0x3d, ')*#/{\xe4/\x96'}}]}}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) (async) 05:56:42 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000280)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001c2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400002, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000240)={0xe, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000100)={0x8, 0x5, &(0x7f0000000040)=[0x0, 0x6, 0x2, 0x20, 0x5], &(0x7f0000000080)=[0xfffd], &(0x7f00000000c0)=[0x1ff, 0x7f8b, 0x8001, 0x58]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 05:56:42 executing program 4: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10420, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscachp2000.u,nodevmap,cache=none,access=client,mmap,obj_user={,subj_role=/,defcontext=sysadm_u,mask=^MAY_READ,\x00']) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000480)=""/1, 0x1}], 0x4}, 0x2001) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x3, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) pipe2$9p(&(0x7f0000000580), 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ff2000/0xc000)=nil}) 05:56:42 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x6000)=nil, 0x7000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) (async) shmat(r0, &(0x7f0000ffa000/0x6000)=nil, 0x7000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async) 05:56:42 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000280)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x20000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001c2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400002, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000240)={0xe, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000100)={0x8, 0x5, &(0x7f0000000040)=[0x0, 0x6, 0x2, 0x20, 0x5], &(0x7f0000000080)=[0xfffd], &(0x7f00000000c0)=[0x1ff, 0x7f8b, 0x8001, 0x58]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:42 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x140011, 0xffffffffffffffff, 0x8) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) (async) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x140011, 0xffffffffffffffff, 0x8) (async) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) (async) 05:56:42 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000280)) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x20000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001c2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400002, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000240)={0xe, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000100)={0x8, 0x5, &(0x7f0000000040)=[0x0, 0x6, 0x2, 0x20, 0x5], &(0x7f0000000080)=[0xfffd], &(0x7f00000000c0)=[0x1ff, 0x7f8b, 0x8001, 0x58]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:42 executing program 4: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10420, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscachp2000.u,nodevmap,cache=none,access=client,mmap,obj_user={,subj_role=/,defcontext=sysadm_u,mask=^MAY_READ,\x00']) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000480)=""/1, 0x1}], 0x4}, 0x2001) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x3, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) pipe2$9p(&(0x7f0000000580), 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ff2000/0xc000)=nil}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10420, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscachp2000.u,nodevmap,cache=none,access=client,mmap,obj_user={,subj_role=/,defcontext=sysadm_u,mask=^MAY_READ,\x00']) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000480)=""/1, 0x1}], 0x4}, 0x2001) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x3, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) (async) pipe2$9p(&(0x7f0000000580), 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ff2000/0xc000)=nil}) (async) 05:56:42 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) (async) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x140011, 0xffffffffffffffff, 0x8) (async) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) 05:56:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[0x20, 0x9, 0x7, 0x5, 0x9, 0x41]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x620000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={r2}) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1090c0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:42 executing program 1: r0 = shmget$private(0x0, 0x2000, 0xe28, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 05:56:42 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x290182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x0, 0x6, @multicast1}]}, 0x85}, 0x1, 0x0, 0x0, 0x8018}, 0x8044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:42 executing program 1: r0 = shmget$private(0x0, 0x2000, 0xe28, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0xe28, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[0x20, 0x9, 0x7, 0x5, 0x9, 0x41]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x620000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={r2}) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1090c0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x1, 0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (rerun: 64) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x41) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000080)={0x6, r1}) 05:56:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[0x20, 0x9, 0x7, 0x5, 0x9, 0x41]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x620000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={r2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[0x20, 0x9, 0x7, 0x5, 0x9, 0x41]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x620000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={r2}) (async) 05:56:42 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x290182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x0, 0x6, @multicast1}]}, 0x85}, 0x1, 0x0, 0x0, 0x8018}, 0x8044) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x41) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000080)={0x6, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x41) (async) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000080)={0x6, r1}) (async) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x41) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000080)={0x6, r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x41) (async) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000080)={0x6, r1}) (async) 05:56:42 executing program 1: r0 = shmget$private(0x0, 0x2000, 0xe28, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0xe28, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1090c0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x1, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:42 executing program 2: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000180)={0x80, 0x3f, 0xd05, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000240)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="0f2dfbb007c7fd99be3d76e3a671d381cddefec8705457503db6559c94a65820be5abd4599640a2e824c923b6ea65f3cea44fb39a755881457784a9860864d1bb56b362295cd3449eb2567f33e707df5d025aa9a9202ffa9372172d5ea46283a23c467021d1be31d68efff600973c0d7f4f7c5a437", 0x75}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 05:56:42 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x290182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x0, 0x6, @multicast1}]}, 0x85}, 0x1, 0x0, 0x0, 0x8018}, 0x8044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:42 executing program 4: ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0) 05:56:42 executing program 2: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000180)={0x80, 0x3f, 0xd05, 0xeeeeeeee}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000240)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) (async) sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="0f2dfbb007c7fd99be3d76e3a671d381cddefec8705457503db6559c94a65820be5abd4599640a2e824c923b6ea65f3cea44fb39a755881457784a9860864d1bb56b362295cd3449eb2567f33e707df5d025aa9a9202ffa9372172d5ea46283a23c467021d1be31d68efff600973c0d7f4f7c5a437", 0x75}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x228300) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r1], 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x10000, 0x1) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) recvmmsg$unix(r3, &(0x7f00000035c0)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/236, 0xec}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000004c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f00000006c0)=""/219, 0xdb}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/14, 0xe}, {&(0x7f0000000940)=""/163, 0xa3}, {&(0x7f0000000a00)=""/179, 0xb3}, {&(0x7f0000000ac0)=""/228, 0xe4}], 0x4}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/181, 0xb5}], 0x1}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e00)=""/147, 0x93}, {&(0x7f0000000ec0)=""/40, 0x28}, {&(0x7f0000000f00)=""/190, 0xbe}, {&(0x7f0000000fc0)=""/155, 0x9b}, {&(0x7f0000001080)=""/151, 0x97}], 0x5, &(0x7f00000011c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/239, 0xef}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/120, 0x78}, {&(0x7f00000034c0)=""/122, 0x7a}], 0x6}}], 0x7, 0x10002, &(0x7f0000003780)={0x77359400}) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000080)=ANY=[@ANYRES16]) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000040)=""/26, 0x1a}], 0x2, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000600), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/240, 0xf0}], 0x3, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x4, 0x12000, &(0x7f0000000b00)={r1, r2+10000000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000b40)={0x0, 0x1}) 05:56:42 executing program 5: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) shmdt(r0) socket$l2tp(0x2, 0x2, 0x73) 05:56:42 executing program 4: ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x228300) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r1], 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x10000, 0x1) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) recvmmsg$unix(r3, &(0x7f00000035c0)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/236, 0xec}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000004c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f00000006c0)=""/219, 0xdb}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/14, 0xe}, {&(0x7f0000000940)=""/163, 0xa3}, {&(0x7f0000000a00)=""/179, 0xb3}, {&(0x7f0000000ac0)=""/228, 0xe4}], 0x4}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/181, 0xb5}], 0x1}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e00)=""/147, 0x93}, {&(0x7f0000000ec0)=""/40, 0x28}, {&(0x7f0000000f00)=""/190, 0xbe}, {&(0x7f0000000fc0)=""/155, 0x9b}, {&(0x7f0000001080)=""/151, 0x97}], 0x5, &(0x7f00000011c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/239, 0xef}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/120, 0x78}, {&(0x7f00000034c0)=""/122, 0x7a}], 0x6}}], 0x7, 0x10002, &(0x7f0000003780)={0x77359400}) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000080)=ANY=[@ANYRES16]) syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x228300) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r1], 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) syz_open_dev$vcsa(&(0x7f0000000140), 0x10000, 0x1) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) (async) recvmmsg$unix(r3, &(0x7f00000035c0)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/236, 0xec}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000004c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f00000006c0)=""/219, 0xdb}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/14, 0xe}, {&(0x7f0000000940)=""/163, 0xa3}, {&(0x7f0000000a00)=""/179, 0xb3}, {&(0x7f0000000ac0)=""/228, 0xe4}], 0x4}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/181, 0xb5}], 0x1}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e00)=""/147, 0x93}, {&(0x7f0000000ec0)=""/40, 0x28}, {&(0x7f0000000f00)=""/190, 0xbe}, {&(0x7f0000000fc0)=""/155, 0x9b}, {&(0x7f0000001080)=""/151, 0x97}], 0x5, &(0x7f00000011c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/239, 0xef}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/120, 0x78}, {&(0x7f00000034c0)=""/122, 0x7a}], 0x6}}], 0x7, 0x10002, &(0x7f0000003780)={0x77359400}) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000080)=ANY=[@ANYRES16]) (async) 05:56:42 executing program 2: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000180)={0x80, 0x3f, 0xd05, 0xeeeeeeee}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000240)) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) (async) sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="0f2dfbb007c7fd99be3d76e3a671d381cddefec8705457503db6559c94a65820be5abd4599640a2e824c923b6ea65f3cea44fb39a755881457784a9860864d1bb56b362295cd3449eb2567f33e707df5d025aa9a9202ffa9372172d5ea46283a23c467021d1be31d68efff600973c0d7f4f7c5a437", 0x75}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 05:56:42 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmget(0x2, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0xc00000, 0x1, &(0x7f0000400000/0xc00000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000fec000/0x11000)=nil, 0x7000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) 05:56:42 executing program 4: ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0) 05:56:42 executing program 5: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) shmdt(r0) (async) socket$l2tp(0x2, 0x2, 0x73) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000040)=""/26, 0x1a}], 0x2, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000600), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/240, 0xf0}], 0x3, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x4, 0x12000, &(0x7f0000000b00)={r1, r2+10000000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000b40)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f0000000280)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000040)=""/26, 0x1a}], 0x2, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000600), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/240, 0xf0}], 0x3, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x4, 0x12000, &(0x7f0000000b00)={r1, r2+10000000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000b40)={0x0, 0x1}) (async) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x228300) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r1], 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x10000, 0x1) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) recvmmsg$unix(r3, &(0x7f00000035c0)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/236, 0xec}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000004c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f00000006c0)=""/219, 0xdb}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/14, 0xe}, {&(0x7f0000000940)=""/163, 0xa3}, {&(0x7f0000000a00)=""/179, 0xb3}, {&(0x7f0000000ac0)=""/228, 0xe4}], 0x4}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/181, 0xb5}], 0x1}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e00)=""/147, 0x93}, {&(0x7f0000000ec0)=""/40, 0x28}, {&(0x7f0000000f00)=""/190, 0xbe}, {&(0x7f0000000fc0)=""/155, 0x9b}, {&(0x7f0000001080)=""/151, 0x97}], 0x5, &(0x7f00000011c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/239, 0xef}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/120, 0x78}, {&(0x7f00000034c0)=""/122, 0x7a}], 0x6}}], 0x7, 0x10002, &(0x7f0000003780)={0x77359400}) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000080)=ANY=[@ANYRES16]) 05:56:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x7f, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:42 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmget(0x2, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0xc00000, 0x1, &(0x7f0000400000/0xc00000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000fec000/0x11000)=nil, 0x7000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) (async) shmget(0x2, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) (async) shmget$private(0x0, 0xc00000, 0x1, &(0x7f0000400000/0xc00000)=nil) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) (async) shmat(r1, &(0x7f0000fec000/0x11000)=nil, 0x7000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) (async) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000040)=""/26, 0x1a}], 0x2, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000600), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/240, 0xf0}], 0x3, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x4, 0x12000, &(0x7f0000000b00)={r1, r2+10000000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000b40)={0x0, 0x1}) 05:56:42 executing program 5: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) shmdt(r0) (async) socket$l2tp(0x2, 0x2, 0x73) 05:56:42 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 05:56:42 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) getuid() 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0xe33}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000002100)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/82, 0x52}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="df731bb5be9abbc3000109000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/192, 0xc0}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/191, 0xbf}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/155, 0x9b}, {&(0x7f0000000b40)=""/187, 0xbb}, {&(0x7f0000000c00)=""/204, 0xcc}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/208, 0xd0}, {&(0x7f0000001e00)=""/243, 0xf3}], 0x9}}], 0x3, 0x1002, &(0x7f0000002080)) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000020c0)={0x1, 0x86}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x4000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000001c0)={0xca5, 0xa, &(0x7f0000000100)=[0x0, 0x401, 0x61b, 0x9e2c, 0x1, 0x5656, 0x1, 0x27b4, 0x3, 0xf8a6], &(0x7f0000000140)=[0x1f, 0x8, 0x0, 0x100, 0x2, 0x1, 0x401], &(0x7f0000000180)=[0x6, 0x2, 0x9, 0xb99, 0x6]}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil}) 05:56:42 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) shmdt(r0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 05:56:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async, rerun: 64) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x7f, 0x0, 0x8}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0xe33}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000002100)) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) recvmmsg$unix(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/82, 0x52}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="df731bb5be9abbc3000109000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/192, 0xc0}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/191, 0xbf}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/155, 0x9b}, {&(0x7f0000000b40)=""/187, 0xbb}, {&(0x7f0000000c00)=""/204, 0xcc}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/208, 0xd0}, {&(0x7f0000001e00)=""/243, 0xf3}], 0x9}}], 0x3, 0x1002, &(0x7f0000002080)) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000020c0)={0x1, 0x86}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x4000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000001c0)={0xca5, 0xa, &(0x7f0000000100)=[0x0, 0x401, 0x61b, 0x9e2c, 0x1, 0x5656, 0x1, 0x27b4, 0x3, 0xf8a6], &(0x7f0000000140)=[0x1f, 0x8, 0x0, 0x100, 0x2, 0x1, 0x401], &(0x7f0000000180)=[0x6, 0x2, 0x9, 0xb99, 0x6]}) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil}) 05:56:42 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (async) 05:56:42 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmget(0x2, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0xc00000, 0x1, &(0x7f0000400000/0xc00000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000fec000/0x11000)=nil, 0x7000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) (async) shmget(0x2, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) (async) shmget$private(0x0, 0xc00000, 0x1, &(0x7f0000400000/0xc00000)=nil) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) (async) shmat(r1, &(0x7f0000fec000/0x11000)=nil, 0x7000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) (async) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) getuid() syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) getuid() (async) 05:56:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0xe33}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000002100)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/82, 0x52}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="df731bb5be9abbc3000109000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/192, 0xc0}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/191, 0xbf}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/155, 0x9b}, {&(0x7f0000000b40)=""/187, 0xbb}, {&(0x7f0000000c00)=""/204, 0xcc}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/208, 0xd0}, {&(0x7f0000001e00)=""/243, 0xf3}], 0x9}}], 0x3, 0x1002, &(0x7f0000002080)) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000020c0)={0x1, 0x86}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x4000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000001c0)={0xca5, 0xa, &(0x7f0000000100)=[0x0, 0x401, 0x61b, 0x9e2c, 0x1, 0x5656, 0x1, 0x27b4, 0x3, 0xf8a6], &(0x7f0000000140)=[0x1f, 0x8, 0x0, 0x100, 0x2, 0x1, 0x401], &(0x7f0000000180)=[0x6, 0x2, 0x9, 0xb99, 0x6]}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil}) 05:56:42 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) (async) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) (async) shmdt(r0) (async) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 05:56:42 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x10000, &(0x7f0000000080)={r0, r1+10000000}) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) clock_getres(0x2, &(0x7f0000000000)) r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r3) shmdt(r3) socketpair(0x9, 0x800, 0x4, &(0x7f0000000100)) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000000c0)=0x4, 0x4) 05:56:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x7f, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:42 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) shmdt(r0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) (async) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) (async) shmdt(r0) (async) shmdt(r0) (async) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) (async) 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) getuid() 05:56:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000001b00), 0x101, 0x1) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000006980)={0x6, 0x4, &(0x7f00000068c0)=[0x6, 0x200, 0x8, 0x8b9], &(0x7f0000006900)=[0x4], &(0x7f0000006940)=[0x7, 0x8, 0x5, 0x1]}) clock_gettime(0x0, &(0x7f00000067c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006540)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000140), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)=""/45, 0x2d}, {&(0x7f00000007c0)=""/39, 0x27}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/172, 0xac}], 0x1, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000b80), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000c00)=""/177, 0xb1}, {&(0x7f0000000cc0)=""/72, 0x48}, {&(0x7f0000000d40)=""/142, 0x8e}, {&(0x7f0000000e00)=""/46, 0x2e}, {&(0x7f0000000e40)=""/185, 0xb9}, {&(0x7f0000000f00)=""/146, 0x92}, {&(0x7f0000000fc0)=""/99, 0x63}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/243, 0xf3}], 0x9, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001400)=""/111, 0x6f}], 0x1, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/133, 0x85}, {&(0x7f00000017c0)=""/233, 0xe9}], 0x3}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/136, 0x88}, {&(0x7f0000001a40)=""/175, 0xaf}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/58, 0x3a}], 0x4}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/218, 0xda}, {&(0x7f0000001d40)=""/45, 0x2d}, {&(0x7f0000001d80)=""/68, 0x44}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002000)=""/224, 0xe0}, {&(0x7f0000002100)=""/92, 0x5c}, {&(0x7f0000002180)=""/162, 0xa2}, {&(0x7f0000002240)=""/59, 0x3b}], 0x4, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000002300)=""/238, 0xee}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/91, 0x5b}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/53, 0x35}], 0x7}}], 0xa, 0x40010000, &(0x7f0000006800)={r3, r4+60000000}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f0000006880)={0x0, &(0x7f0000006840)=""/2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:42 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil}) 05:56:42 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)=[0x5, 0x8, 0x6, 0x5, 0x100, 0x4], &(0x7f0000000040)=[0x4, 0xfdca], 0x11, 0x7, 0xae, &(0x7f0000000080)=[0x8000, 0x10001, 0x20, 0x6, 0x7ff, 0x1f, 0x1b7], &(0x7f00000000c0)=[0x5, 0x7, 0x40, 0x1, 0x2, 0x101, 0x4, 0x3, 0x80]}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmget(0x1, 0x1000, 0x80, &(0x7f0000ffb000/0x1000)=nil) 05:56:42 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x10000, &(0x7f0000000080)={r0, r1+10000000}) (async) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) clock_getres(0x2, &(0x7f0000000000)) (async) r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r3) (async) shmdt(r3) (async) socketpair(0x9, 0x800, 0x4, &(0x7f0000000100)) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000000c0)=0x4, 0x4) 05:56:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x401, 0x6000) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=[0x523], &(0x7f00000000c0)=[0x91, 0x2, 0x8000, 0x2, 0x800, 0x1, 0x5340800, 0x3, 0x0], &(0x7f0000000100)=[0xffff, 0x4, 0x8, 0x7f, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400102) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000001b00), 0x101, 0x1) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000006980)={0x6, 0x4, &(0x7f00000068c0)=[0x6, 0x200, 0x8, 0x8b9], &(0x7f0000006900)=[0x4], &(0x7f0000006940)=[0x7, 0x8, 0x5, 0x1]}) clock_gettime(0x0, &(0x7f00000067c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006540)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000140), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)=""/45, 0x2d}, {&(0x7f00000007c0)=""/39, 0x27}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/172, 0xac}], 0x1, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000b80), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000c00)=""/177, 0xb1}, {&(0x7f0000000cc0)=""/72, 0x48}, {&(0x7f0000000d40)=""/142, 0x8e}, {&(0x7f0000000e00)=""/46, 0x2e}, {&(0x7f0000000e40)=""/185, 0xb9}, {&(0x7f0000000f00)=""/146, 0x92}, {&(0x7f0000000fc0)=""/99, 0x63}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/243, 0xf3}], 0x9, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001400)=""/111, 0x6f}], 0x1, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/133, 0x85}, {&(0x7f00000017c0)=""/233, 0xe9}], 0x3}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/136, 0x88}, {&(0x7f0000001a40)=""/175, 0xaf}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/58, 0x3a}], 0x4}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/218, 0xda}, {&(0x7f0000001d40)=""/45, 0x2d}, {&(0x7f0000001d80)=""/68, 0x44}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002000)=""/224, 0xe0}, {&(0x7f0000002100)=""/92, 0x5c}, {&(0x7f0000002180)=""/162, 0xa2}, {&(0x7f0000002240)=""/59, 0x3b}], 0x4, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000002300)=""/238, 0xee}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/91, 0x5b}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/53, 0x35}], 0x7}}], 0xa, 0x40010000, &(0x7f0000006800)={r3, r4+60000000}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f0000006880)={0x0, &(0x7f0000006840)=""/2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) syz_open_dev$dri(&(0x7f0000001b00), 0x101, 0x1) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000006980)={0x6, 0x4, &(0x7f00000068c0)=[0x6, 0x200, 0x8, 0x8b9], &(0x7f0000006900)=[0x4], &(0x7f0000006940)=[0x7, 0x8, 0x5, 0x1]}) (async) clock_gettime(0x0, &(0x7f00000067c0)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006540)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000140), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)=""/45, 0x2d}, {&(0x7f00000007c0)=""/39, 0x27}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/172, 0xac}], 0x1, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000b80), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000c00)=""/177, 0xb1}, {&(0x7f0000000cc0)=""/72, 0x48}, {&(0x7f0000000d40)=""/142, 0x8e}, {&(0x7f0000000e00)=""/46, 0x2e}, {&(0x7f0000000e40)=""/185, 0xb9}, {&(0x7f0000000f00)=""/146, 0x92}, {&(0x7f0000000fc0)=""/99, 0x63}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/243, 0xf3}], 0x9, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001400)=""/111, 0x6f}], 0x1, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/133, 0x85}, {&(0x7f00000017c0)=""/233, 0xe9}], 0x3}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/136, 0x88}, {&(0x7f0000001a40)=""/175, 0xaf}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/58, 0x3a}], 0x4}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/218, 0xda}, {&(0x7f0000001d40)=""/45, 0x2d}, {&(0x7f0000001d80)=""/68, 0x44}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002000)=""/224, 0xe0}, {&(0x7f0000002100)=""/92, 0x5c}, {&(0x7f0000002180)=""/162, 0xa2}, {&(0x7f0000002240)=""/59, 0x3b}], 0x4, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000002300)=""/238, 0xee}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/91, 0x5b}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/53, 0x35}], 0x7}}], 0xa, 0x40010000, &(0x7f0000006800)={r3, r4+60000000}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f0000006880)={0x0, &(0x7f0000006840)=""/2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:43 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)=[0x5, 0x8, 0x6, 0x5, 0x100, 0x4], &(0x7f0000000040)=[0x4, 0xfdca], 0x11, 0x7, 0xae, &(0x7f0000000080)=[0x8000, 0x10001, 0x20, 0x6, 0x7ff, 0x1f, 0x1b7], &(0x7f00000000c0)=[0x5, 0x7, 0x40, 0x1, 0x2, 0x101, 0x4, 0x3, 0x80]}) (async, rerun: 32) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) (rerun: 32) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) (async, rerun: 32) shmget(0x1, 0x1000, 0x80, &(0x7f0000ffb000/0x1000)=nil) (rerun: 32) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x401, 0x6000) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=[0x523], &(0x7f00000000c0)=[0x91, 0x2, 0x8000, 0x2, 0x800, 0x1, 0x5340800, 0x3, 0x0], &(0x7f0000000100)=[0xffff, 0x4, 0x8, 0x7f, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x401, 0x6000) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=[0x523], &(0x7f00000000c0)=[0x91, 0x2, 0x8000, 0x2, 0x800, 0x1, 0x5340800, 0x3, 0x0], &(0x7f0000000100)=[0xffff, 0x4, 0x8, 0x7f, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:43 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil}) 05:56:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400102) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) 05:56:43 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x10000, &(0x7f0000000080)={r0, r1+10000000}) (async) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) clock_getres(0x2, &(0x7f0000000000)) r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r3) shmdt(r3) socketpair(0x9, 0x800, 0x4, &(0x7f0000000100)) (async) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000000c0)=0x4, 0x4) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000001b00), 0x101, 0x1) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000006980)={0x6, 0x4, &(0x7f00000068c0)=[0x6, 0x200, 0x8, 0x8b9], &(0x7f0000006900)=[0x4], &(0x7f0000006940)=[0x7, 0x8, 0x5, 0x1]}) clock_gettime(0x0, &(0x7f00000067c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006540)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000140), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)=""/45, 0x2d}, {&(0x7f00000007c0)=""/39, 0x27}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/172, 0xac}], 0x1, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000b80), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000c00)=""/177, 0xb1}, {&(0x7f0000000cc0)=""/72, 0x48}, {&(0x7f0000000d40)=""/142, 0x8e}, {&(0x7f0000000e00)=""/46, 0x2e}, {&(0x7f0000000e40)=""/185, 0xb9}, {&(0x7f0000000f00)=""/146, 0x92}, {&(0x7f0000000fc0)=""/99, 0x63}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/243, 0xf3}], 0x9, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001400)=""/111, 0x6f}], 0x1, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/133, 0x85}, {&(0x7f00000017c0)=""/233, 0xe9}], 0x3}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/136, 0x88}, {&(0x7f0000001a40)=""/175, 0xaf}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/58, 0x3a}], 0x4}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/218, 0xda}, {&(0x7f0000001d40)=""/45, 0x2d}, {&(0x7f0000001d80)=""/68, 0x44}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002000)=""/224, 0xe0}, {&(0x7f0000002100)=""/92, 0x5c}, {&(0x7f0000002180)=""/162, 0xa2}, {&(0x7f0000002240)=""/59, 0x3b}], 0x4, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000002300)=""/238, 0xee}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/91, 0x5b}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/53, 0x35}], 0x7}}], 0xa, 0x40010000, &(0x7f0000006800)={r3, r4+60000000}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f0000006880)={0x0, &(0x7f0000006840)=""/2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) syz_open_dev$dri(&(0x7f0000001b00), 0x101, 0x1) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000006980)={0x6, 0x4, &(0x7f00000068c0)=[0x6, 0x200, 0x8, 0x8b9], &(0x7f0000006900)=[0x4], &(0x7f0000006940)=[0x7, 0x8, 0x5, 0x1]}) (async) clock_gettime(0x0, &(0x7f00000067c0)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006540)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000140), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)=""/45, 0x2d}, {&(0x7f00000007c0)=""/39, 0x27}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/172, 0xac}], 0x1, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000b80), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000c00)=""/177, 0xb1}, {&(0x7f0000000cc0)=""/72, 0x48}, {&(0x7f0000000d40)=""/142, 0x8e}, {&(0x7f0000000e00)=""/46, 0x2e}, {&(0x7f0000000e40)=""/185, 0xb9}, {&(0x7f0000000f00)=""/146, 0x92}, {&(0x7f0000000fc0)=""/99, 0x63}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/243, 0xf3}], 0x9, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001400)=""/111, 0x6f}], 0x1, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/133, 0x85}, {&(0x7f00000017c0)=""/233, 0xe9}], 0x3}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/136, 0x88}, {&(0x7f0000001a40)=""/175, 0xaf}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/58, 0x3a}], 0x4}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/218, 0xda}, {&(0x7f0000001d40)=""/45, 0x2d}, {&(0x7f0000001d80)=""/68, 0x44}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002000)=""/224, 0xe0}, {&(0x7f0000002100)=""/92, 0x5c}, {&(0x7f0000002180)=""/162, 0xa2}, {&(0x7f0000002240)=""/59, 0x3b}], 0x4, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000002300)=""/238, 0xee}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/91, 0x5b}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/53, 0x35}], 0x7}}], 0xa, 0x40010000, &(0x7f0000006800)={r3, r4+60000000}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f0000006880)={0x0, &(0x7f0000006840)=""/2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:43 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)=[0x5, 0x8, 0x6, 0x5, 0x100, 0x4], &(0x7f0000000040)=[0x4, 0xfdca], 0x11, 0x7, 0xae, &(0x7f0000000080)=[0x8000, 0x10001, 0x20, 0x6, 0x7ff, 0x1f, 0x1b7], &(0x7f00000000c0)=[0x5, 0x7, 0x40, 0x1, 0x2, 0x101, 0x4, 0x3, 0x80]}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmget(0x1, 0x1000, 0x80, &(0x7f0000ffb000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)=[0x5, 0x8, 0x6, 0x5, 0x100, 0x4], &(0x7f0000000040)=[0x4, 0xfdca], 0x11, 0x7, 0xae, &(0x7f0000000080)=[0x8000, 0x10001, 0x20, 0x6, 0x7ff, 0x1f, 0x1b7], &(0x7f00000000c0)=[0x5, 0x7, 0x40, 0x1, 0x2, 0x101, 0x4, 0x3, 0x80]}) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) (async) shmget(0x1, 0x1000, 0x80, &(0x7f0000ffb000/0x1000)=nil) (async) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x4, 0x7, 0x22, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x800, 0x7}}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x2, 0x6, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "a0e6c7bfe89b5f80"}}, 0x48}, 0x1, 0x0, 0x0, 0x10000800}, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400102) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400102) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000080)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) (async) 05:56:43 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x5633, 0x8000, 0x7, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x401, 0x6000) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=[0x523], &(0x7f00000000c0)=[0x91, 0x2, 0x8000, 0x2, 0x800, 0x1, 0x5340800, 0x3, 0x0], &(0x7f0000000100)=[0xffff, 0x4, 0x8, 0x7f, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x3f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x401, 0x6000) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=[0x523], &(0x7f00000000c0)=[0x91, 0x2, 0x8000, 0x2, 0x800, 0x1, 0x5340800, 0x3, 0x0], &(0x7f0000000100)=[0xffff, 0x4, 0x8, 0x7f, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:43 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil}) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x4, 0x7, 0x22, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x800, 0x7}}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x2, 0x6, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "a0e6c7bfe89b5f80"}}, 0x48}, 0x1, 0x0, 0x0, 0x10000800}, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x4, 0x7, 0x22, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x800, 0x7}}) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x2, 0x6, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "a0e6c7bfe89b5f80"}}, 0x48}, 0x1, 0x0, 0x0, 0x10000800}, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:43 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x5633, 0x8000, 0x7, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:43 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)="f68c8b9366b65946ff0eab9ece29a186fcf982091dce24c25f42e7d36a8f048ac9edc177be8ed6101b3d98e8aae1744698d4f22eb11514adf3d58e4302dd4b660a2d53990b73196f9d12caa1", 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x8094) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x4, 0x7, 0x22, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x800, 0x7}}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x2, 0x6, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "a0e6c7bfe89b5f80"}}, 0x48}, 0x1, 0x0, 0x0, 0x10000800}, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:43 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 05:56:43 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x5633, 0x8000, 0x7, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:43 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000080)=""/211, 0xd3}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/203, 0xcb}, {&(0x7f0000001480)=""/240, 0xf0}, {&(0x7f0000001580)=""/163, 0xa3}, {&(0x7f0000001640)=""/5, 0x5}, {&(0x7f0000001680)=""/224, 0xe0}], 0x9, &(0x7f0000001840)=""/52, 0x34}, 0x2020) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001940)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000001a40)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001a80)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="02000000e8b9b9b69a511304169e7c8b0057b5c3d634c6d2b37b5fbfd3c79f8ceb6f9c52906bd18b651d9c9b5c1e72aa246435e0ccdfa9d190a6ec23be28f31ec58e0f0c99db1ac3201e25260dc27a641ddfb76022b052b13832608130f85e45278fca5cd278b194380be71d7d1e84c58e8d6e6c213149f3e9989bdc1d4a21315f26ebabb01ed385123ee976be84851b0104d05cfa6cf88c812de04eff0dc1a422988894758dbadc136599fd182f48ac8c38", @ANYRES16=r5, @ANYBLOB="01000416000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002ec0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002fc0)=0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r9, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r8, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003340)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003300)={&(0x7f0000001b00)=ANY=[@ANYBLOB="cc020000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="340102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004003f0000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004002000000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040009000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000008000008000600", @ANYRES32=r4, @ANYBLOB="08000100c494492bacd5e45c0747500f0c24d7389d5ca71ee43b732dc6ec4baa4152d37b88f4f8af9a112916584d3df415acd20a4c344e9d0563570c4e23269382da5e224520ba85", @ANYRES32=0x0, @ANYBLOB="740102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400079c000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f7214a2a2c261747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040002000000080006c7", @ANYRES32=0x0, @ANYBLOB], 0x2cc}, 0x1, 0x0, 0x0, 0x22000100}, 0x4004) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r10 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r10, &(0x7f0000ffe000/0x2000)=nil, 0x5000) 05:56:43 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) (async) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) (async) 05:56:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/197, 0xc5}], 0x1, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)=""/119, 0x77}, {&(0x7f00000006c0)=""/49, 0x31}], 0x2}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/7, 0x7}, {&(0x7f0000000800)=""/206, 0xce}], 0x2, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x3, 0x40002002, &(0x7f0000000b00)={0x77359400}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001c80)={0x53, 0xffffffffffffffff, 0x32, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000b40)=""/4096}, &(0x7f0000001b40)="3a144106aef1a84f2c909d68217c43da40ccac9cae5b696676f446bd9006a3b967c373f2619e7286d7823b1b01c417d72062", &(0x7f0000001b80)=""/165, 0x5, 0x2, 0x0, &(0x7f0000001c40)}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x10000}) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000140), 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000300)=[r3, 0x0, 0x0, 0x0, 0x0, r4, 0x0, r5, 0x0], 0x2}) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) sendmsg$802154_raw(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)="f68c8b9366b65946ff0eab9ece29a186fcf982091dce24c25f42e7d36a8f048ac9edc177be8ed6101b3d98e8aae1744698d4f22eb11514adf3d58e4302dd4b660a2d53990b73196f9d12caa1", 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x8094) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x2, 0x2, &(0x7f0000000040)=[0xc33a, 0xffff], &(0x7f0000000080)=[0x7], &(0x7f0000000100)=[0x7ff, 0xffff]}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) 05:56:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/197, 0xc5}], 0x1, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)=""/119, 0x77}, {&(0x7f00000006c0)=""/49, 0x31}], 0x2}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/7, 0x7}, {&(0x7f0000000800)=""/206, 0xce}], 0x2, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x3, 0x40002002, &(0x7f0000000b00)={0x77359400}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001c80)={0x53, 0xffffffffffffffff, 0x32, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000b40)=""/4096}, &(0x7f0000001b40)="3a144106aef1a84f2c909d68217c43da40ccac9cae5b696676f446bd9006a3b967c373f2619e7286d7823b1b01c417d72062", &(0x7f0000001b80)=""/165, 0x5, 0x2, 0x0, &(0x7f0000001c40)}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x10000}) (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000140), 0x4) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000300)=[r3, 0x0, 0x0, 0x0, 0x0, r4, 0x0, r5, 0x0], 0x2}) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 05:56:43 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000800000/0x800000)=nil, 0x4000) 05:56:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/197, 0xc5}], 0x1, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)=""/119, 0x77}, {&(0x7f00000006c0)=""/49, 0x31}], 0x2}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/7, 0x7}, {&(0x7f0000000800)=""/206, 0xce}], 0x2, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x3, 0x40002002, &(0x7f0000000b00)={0x77359400}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001c80)={0x53, 0xffffffffffffffff, 0x32, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000b40)=""/4096}, &(0x7f0000001b40)="3a144106aef1a84f2c909d68217c43da40ccac9cae5b696676f446bd9006a3b967c373f2619e7286d7823b1b01c417d72062", &(0x7f0000001b80)=""/165, 0x5, 0x2, 0x0, &(0x7f0000001c40)}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x10000}) (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000140), 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000300)=[r3, 0x0, 0x0, 0x0, 0x0, r4, 0x0, r5, 0x0], 0x2}) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) sendmsg$802154_raw(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)="f68c8b9366b65946ff0eab9ece29a186fcf982091dce24c25f42e7d36a8f048ac9edc177be8ed6101b3d98e8aae1744698d4f22eb11514adf3d58e4302dd4b660a2d53990b73196f9d12caa1", 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x8094) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (rerun: 32) [ 1899.691843] nla_parse: 14 callbacks suppressed [ 1899.691849] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:43 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000080)=""/211, 0xd3}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/203, 0xcb}, {&(0x7f0000001480)=""/240, 0xf0}, {&(0x7f0000001580)=""/163, 0xa3}, {&(0x7f0000001640)=""/5, 0x5}, {&(0x7f0000001680)=""/224, 0xe0}], 0x9, &(0x7f0000001840)=""/52, 0x34}, 0x2020) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'team0\x00', 0x0}) (rerun: 32) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001940)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000001a40)=0xe8) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 32) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 32) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001a80)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="02000000e8b9b9b69a511304169e7c8b0057b5c3d634c6d2b37b5fbfd3c79f8ceb6f9c52906bd18b651d9c9b5c1e72aa246435e0ccdfa9d190a6ec23be28f31ec58e0f0c99db1ac3201e25260dc27a641ddfb76022b052b13832608130f85e45278fca5cd278b194380be71d7d1e84c58e8d6e6c213149f3e9989bdc1d4a21315f26ebabb01ed385123ee976be84851b0104d05cfa6cf88c812de04eff0dc1a422988894758dbadc136599fd182f48ac8c38", @ANYRES16=r5, @ANYBLOB="01000416000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002ec0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002fc0)=0xe8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r9, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r8, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003340)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003300)={&(0x7f0000001b00)=ANY=[@ANYBLOB="cc020000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="340102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004003f0000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004002000000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040009000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000008000008000600", @ANYRES32=r4, @ANYBLOB="08000100c494492bacd5e45c0747500f0c24d7389d5ca71ee43b732dc6ec4baa4152d37b88f4f8af9a112916584d3df415acd20a4c344e9d0563570c4e23269382da5e224520ba85", @ANYRES32=0x0, @ANYBLOB="740102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400079c000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f7214a2a2c261747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040002000000080006c7", @ANYRES32=0x0, @ANYBLOB], 0x2cc}, 0x1, 0x0, 0x0, 0x22000100}, 0x4004) (rerun: 64) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r10 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r10, &(0x7f0000ffe000/0x2000)=nil, 0x5000) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x2, 0x2, &(0x7f0000000040)=[0xc33a, 0xffff], &(0x7f0000000080)=[0x7], &(0x7f0000000100)=[0x7ff, 0xffff]}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x2, 0x2, &(0x7f0000000040)=[0xc33a, 0xffff], &(0x7f0000000080)=[0x7], &(0x7f0000000100)=[0x7ff, 0xffff]}) (async) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) (async) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x2, 0x2, &(0x7f0000000040)=[0xc33a, 0xffff], &(0x7f0000000080)=[0x7], &(0x7f0000000100)=[0x7ff, 0xffff]}) (async, rerun: 32) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) (rerun: 32) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil}) 05:56:43 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0xffffffffffffffff, &(0x7f0000800000/0x800000)=nil, 0x4000) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 05:56:43 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0xffffffffffffffff, &(0x7f0000800000/0x800000)=nil, 0x4000) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil}) (async) [ 1899.850277] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1899.866467] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1899.898308] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x420880) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=""/38}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000100)=[0x6, 0x1, 0x2a0, 0x7, 0x5], &(0x7f0000000140)=[0x3], &(0x7f0000000180)=[0x81, 0x8]}) [ 1899.938597] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1899.968497] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:43 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000080)=""/211, 0xd3}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/203, 0xcb}, {&(0x7f0000001480)=""/240, 0xf0}, {&(0x7f0000001580)=""/163, 0xa3}, {&(0x7f0000001640)=""/5, 0x5}, {&(0x7f0000001680)=""/224, 0xe0}], 0x9, &(0x7f0000001840)=""/52, 0x34}, 0x2020) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001940)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000001a40)=0xe8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001a80)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="02000000e8b9b9b69a511304169e7c8b0057b5c3d634c6d2b37b5fbfd3c79f8ceb6f9c52906bd18b651d9c9b5c1e72aa246435e0ccdfa9d190a6ec23be28f31ec58e0f0c99db1ac3201e25260dc27a641ddfb76022b052b13832608130f85e45278fca5cd278b194380be71d7d1e84c58e8d6e6c213149f3e9989bdc1d4a21315f26ebabb01ed385123ee976be84851b0104d05cfa6cf88c812de04eff0dc1a422988894758dbadc136599fd182f48ac8c38", @ANYRES16=r5, @ANYBLOB="01000416000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002ec0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002fc0)=0xe8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r9, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r8, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003340)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003300)={&(0x7f0000001b00)=ANY=[@ANYBLOB="cc020000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="340102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004003f0000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004002000000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040009000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000008000008000600", @ANYRES32=r4, @ANYBLOB="08000100c494492bacd5e45c0747500f0c24d7389d5ca71ee43b732dc6ec4baa4152d37b88f4f8af9a112916584d3df415acd20a4c344e9d0563570c4e23269382da5e224520ba85", @ANYRES32=0x0, @ANYBLOB="740102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400079c000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f7214a2a2c261747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040002000000080006c7", @ANYRES32=0x0, @ANYBLOB], 0x2cc}, 0x1, 0x0, 0x0, 0x22000100}, 0x4004) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r10 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r10, &(0x7f0000ffe000/0x2000)=nil, 0x5000) 05:56:43 executing program 5: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040091) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil}) (async) 05:56:43 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)=r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7}) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x420880) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=""/38}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000100)=[0x6, 0x1, 0x2a0, 0x7, 0x5], &(0x7f0000000140)=[0x3], &(0x7f0000000180)=[0x81, 0x8]}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x420880) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=""/38}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000100)=[0x6, 0x1, 0x2a0, 0x7, 0x5], &(0x7f0000000140)=[0x3], &(0x7f0000000180)=[0x81, 0x8]}) (async) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil}) [ 1899.981591] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1899.990904] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1899.999832] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1900.009770] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. 05:56:43 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)=r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)=r0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7}) (async) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil}) 05:56:43 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xd000) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={r2, r3, 0x0, 0x0, 0x2}) 05:56:43 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xd000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x420880) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=""/38}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000100)=[0x6, 0x1, 0x2a0, 0x7, 0x5], &(0x7f0000000140)=[0x3], &(0x7f0000000180)=[0x81, 0x8]}) 05:56:43 executing program 5: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040091) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040091) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={r2, r3, 0x0, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={r2, r3, 0x0, 0x0, 0x2}) (async) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x58, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:43 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)=r0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7}) (rerun: 64) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil}) 05:56:43 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xd000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) (async, rerun: 32) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (rerun: 32) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x58, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x58, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:43 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), 0x4) r1 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) r2 = shmget(0x1, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)={0x0}) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={r4}) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmdt(r1) 05:56:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, '\x00', 0x9, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:43 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:43 executing program 5: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040091) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040091) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={r2, r3, 0x0, 0x0, 0x2}) 05:56:43 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), 0x4) r1 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) r2 = shmget(0x1, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)={0x0}) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={r4}) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmdt(r1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r0, 0x0, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), 0x4) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) (async) shmget(0x1, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)) (async) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={r4}) (async) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x7000) (async) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x0) (async) shmdt(r1) (async) 05:56:43 executing program 3: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2}) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) 05:56:44 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), 0x4) (async) r1 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) r2 = shmget(0x1, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)={0x0}) (async) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={r4}) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x7000) (async) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x0) (async) shmdt(r1) 05:56:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, '\x00', 0x9, 0x6}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:44 executing program 3: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2}) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x82000000) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x2, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) (async) 05:56:44 executing program 3: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2}) (async) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x82000000) 05:56:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, '\x00', 0x9, 0x6}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x2, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x82000000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x82000000) (async) 05:56:44 executing program 4: shmget(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) (async) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x2, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) 05:56:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) 05:56:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x24400, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/253, 0xfd}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/73, 0x49}], 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)=""/43, 0x2b}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/40, 0x28}, {&(0x7f0000000b00)=""/32, 0x20}, {&(0x7f0000000b40)=""/175, 0xaf}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000d00)=""/59, 0x3b}], 0x9}}], 0x3, 0x40000000, &(0x7f0000000ec0)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000f00)={0x400, 0x80000001, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) shmdt(r0) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xe0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:44 executing program 4: shmget(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1}) (async) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xe0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (rerun: 64) 05:56:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x24400, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/253, 0xfd}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/73, 0x49}], 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)=""/43, 0x2b}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/40, 0x28}, {&(0x7f0000000b00)=""/32, 0x20}, {&(0x7f0000000b40)=""/175, 0xaf}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000d00)=""/59, 0x3b}], 0x9}}], 0x3, 0x40000000, &(0x7f0000000ec0)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000f00)={0x400, 0x80000001, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x24400, 0x0) (async) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/253, 0xfd}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/73, 0x49}], 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="340000000000000001000000010000002a408c9fe1fe6c0880ab5ca316f6ea24f43f9b464f8fab6ccc0294046ffc063f315ca27cd38db42930030a202dde5574146b064ac5777ec53a3c123f21abf1a19c0e23eadce06ed9b81b8243fb9d8d096e40633eb84fc9669ce1e077305411f7efd37bc510ef3f51235dc7f3a1133da19da0e7d88f2d5e31fd2171e3d4209c159f66d5fab2eba241bad33cf4a42f36612ddb161d6b5bfc21c22b43f6ea53d375c7d87c599d9359289c9e284beaa8f003628c8917f2a3982e7412c7751c1a0ded521edb94b0ca066afa4ad20a0c7f2f94a4d212cd7937c289b6b73f49a309f37af9e21e7f268b4234892bfa937de3dacfb6", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)=""/43, 0x2b}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/40, 0x28}, {&(0x7f0000000b00)=""/32, 0x20}, {&(0x7f0000000b40)=""/175, 0xaf}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000d00)=""/59, 0x3b}], 0x9}}], 0x3, 0x40000000, &(0x7f0000000ec0)) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000f00)={0x400, 0x80000001, 0x0, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) (async) shmdt(r0) (async) shmdt(r0) (async) 05:56:44 executing program 4: shmget(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:44 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x400000) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xe0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:44 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$unix(0x1, 0x5, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x600582, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 05:56:44 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x400000) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x400000) (async) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async, rerun: 32) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) (rerun: 32) shmdt(r0) (async, rerun: 32) shmdt(r0) (rerun: 32) 05:56:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x24400, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/253, 0xfd}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/73, 0x49}], 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)=""/43, 0x2b}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/40, 0x28}, {&(0x7f0000000b00)=""/32, 0x20}, {&(0x7f0000000b40)=""/175, 0xaf}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000d00)=""/59, 0x3b}], 0x9}}], 0x3, 0x40000000, &(0x7f0000000ec0)) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000f00)={0x400, 0x80000001, 0x0, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:44 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) socket$unix(0x1, 0x5, 0x0) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x600582, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 05:56:44 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x400000) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80007, 0x1fd, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 05:56:44 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$unix(0x1, 0x5, 0x0) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x600582, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), 0x4) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80007, 0x1fd, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80007, 0x1fd, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) 05:56:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000002300)=ANY=[@ANYBLOB="240100000550e1660e159d2abde97870b9d9ec70fe2228605c4117", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf25020000000800010003000000a0000c803c000b800800090070cbb51108000a00bba800000800090096c4533108000a0019b4000008000900b0e4cb3a08000a003d9b000008000900660d4a6b3c000b8008000900b515b07808000a003d860000080009004f27271f080009006ecea74208000a0091c4000008000900e83eb33d08000a00c28b000024000b80080009006fcb017708000a00fae200000800090042c8f87c08000900b6b7b7592c000480050003000500000005000300060000000500030006000000050003000700000005000300000000003c0004800500030000000000050003000000000005000300000000000500030005000000050003000600000005000300000000000500030005000000"], 0x124}, 0x1, 0x0, 0x0, 0x20044001}, 0x4000010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001980), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000180000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c0000000000479dd9de3bc6e1c188b2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="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"], 0xd8}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002180), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0xc0, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cbf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x562644f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ac1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9640}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cc425c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d8676e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2290}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a0b6ccb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f4c04fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8061}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1df3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x534531a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a0358a4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fb96f30}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000002080)={0x3, 0xb}) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={0x0}}, 0xd7a2edb63254819) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e80)={0xffffffffffffffb5, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35b9812f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d140aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eaefc49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23eff2d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ec4a46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53bd8234}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4825c564}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e489798}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd80b814}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2acd880c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d885c2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c3b235e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x5b4b9582}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7be1c89f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf2a1c0e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x790447a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed97}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77f2e4a2}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) perf_event_open(&(0x7f0000001dc0)={0x5, 0x80, 0x3f, 0x7f, 0x80, 0x3, 0x0, 0x20, 0x4001, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x9}, 0x401, 0x2, 0x9, 0x7, 0x3, 0xc56, 0x5, 0x0, 0xff, 0x0, 0xffffffff}, r1, 0x8, r6, 0x8) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000080)={0x8}) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000002100)={0x6, &(0x7f00000020c0)=[0xff000000, 0xff, 0x7, 0x8001, 0x80, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)={r8}) 05:56:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x203c0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000240)={0x2, 0x3ff, 0x80000001, 0xbbbbbbbb}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r2, 0x0, r3, r6], &(0x7f00000001c0)=[0x0, 0x0], 0x4}) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) 05:56:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002100)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x3a0, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6d04894d}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x20, 0x0, 0x1, 0x3}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7688d9e2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48800}, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80007, 0x1fd, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80007, 0x1fd, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), 0x4) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000002300)=ANY=[@ANYBLOB="240100000550e1660e159d2abde97870b9d9ec70fe2228605c4117", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf25020000000800010003000000a0000c803c000b800800090070cbb51108000a00bba800000800090096c4533108000a0019b4000008000900b0e4cb3a08000a003d9b000008000900660d4a6b3c000b8008000900b515b07808000a003d860000080009004f27271f080009006ecea74208000a0091c4000008000900e83eb33d08000a00c28b000024000b80080009006fcb017708000a00fae200000800090042c8f87c08000900b6b7b7592c000480050003000500000005000300060000000500030006000000050003000700000005000300000000003c0004800500030000000000050003000000000005000300000000000500030005000000050003000600000005000300000000000500030005000000"], 0x124}, 0x1, 0x0, 0x0, 0x20044001}, 0x4000010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001980), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000180000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c0000000000479dd9de3bc6e1c188b2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="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"], 0xd8}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002180), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0xc0, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cbf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x562644f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ac1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9640}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cc425c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d8676e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2290}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a0b6ccb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f4c04fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8061}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1df3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x534531a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a0358a4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fb96f30}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000002080)={0x3, 0xb}) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={0x0}}, 0xd7a2edb63254819) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e80)={0xffffffffffffffb5, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35b9812f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d140aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eaefc49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23eff2d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ec4a46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53bd8234}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4825c564}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e489798}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd80b814}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2acd880c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d885c2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c3b235e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x5b4b9582}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7be1c89f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf2a1c0e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x790447a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed97}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77f2e4a2}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) perf_event_open(&(0x7f0000001dc0)={0x5, 0x80, 0x3f, 0x7f, 0x80, 0x3, 0x0, 0x20, 0x4001, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x9}, 0x401, 0x2, 0x9, 0x7, 0x3, 0xc56, 0x5, 0x0, 0xff, 0x0, 0xffffffff}, r1, 0x8, r6, 0x8) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000080)={0x8}) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000002100)={0x6, &(0x7f00000020c0)=[0xff000000, 0xff, 0x7, 0x8001, 0x80, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)={r8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000002300)=ANY=[@ANYBLOB="240100000550e1660e159d2abde97870b9d9ec70fe2228605c4117", @ANYRES16=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x20044001}, 0x4000010) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001980), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000180000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c0000000000479dd9de3bc6e1c188b2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="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"], 0xd8}, 0x0) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002180), r0) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0xc0, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cbf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x562644f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ac1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9640}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cc425c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d8676e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2290}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a0b6ccb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f4c04fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8061}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1df3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x534531a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a0358a4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fb96f30}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000002080)={0x3, 0xb}) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={0x0}}, 0xd7a2edb63254819) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e80)={0xffffffffffffffb5, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35b9812f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d140aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eaefc49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23eff2d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ec4a46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53bd8234}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4825c564}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e489798}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd80b814}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2acd880c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d885c2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c3b235e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x5b4b9582}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7be1c89f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf2a1c0e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x790447a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed97}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77f2e4a2}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) (async) perf_event_open(&(0x7f0000001dc0)={0x5, 0x80, 0x3f, 0x7f, 0x80, 0x3, 0x0, 0x20, 0x4001, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x9}, 0x401, 0x2, 0x9, 0x7, 0x3, 0xc56, 0x5, 0x0, 0xff, 0x0, 0xffffffff}, r1, 0x8, r6, 0x8) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000080)={0x8}) (async) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000002100)={0x6, &(0x7f00000020c0)=[0xff000000, 0xff, 0x7, 0x8001, 0x80, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)={r8}) (async) 05:56:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x203c0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000240)={0x2, 0x3ff, 0x80000001, 0xbbbbbbbb}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r2, 0x0, r3, r6], &(0x7f00000001c0)=[0x0, 0x0], 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x203c0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000240)={0x2, 0x3ff, 0x80000001, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r2, 0x0, r3, r6], &(0x7f00000001c0)=[0x0, 0x0], 0x4}) (async) 05:56:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002100)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x3a0, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6d04894d}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x20, 0x0, 0x1, 0x3}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7688d9e2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48800}, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002100)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x3a0, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6d04894d}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x20, 0x0, 0x1, 0x3}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7688d9e2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), 0x4) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x82000000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x5000) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x800, 0x401, 0x7fff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x401, 0x4, &(0x7f0000000040)=[0x7, 0x1f, 0x0, 0xaf], &(0x7f0000000080)=[0x1], &(0x7f00000000c0)=[0x1000, 0x8, 0x7, 0x8, 0x6, 0x1, 0x9], &(0x7f0000000100)=[0x5467, 0x2, 0x1, 0x9, 0x9], 0x0, 0x1}) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 32) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) (rerun: 32) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x82000000) (async, rerun: 32) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x5000) (rerun: 32) 05:56:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x203c0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000240)={0x2, 0x3ff, 0x80000001, 0xbbbbbbbb}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r2, 0x0, r3, r6], &(0x7f00000001c0)=[0x0, 0x0], 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x203c0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000240)={0x2, 0x3ff, 0x80000001, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r2, 0x0, r3, r6], &(0x7f00000001c0)=[0x0, 0x0], 0x4}) (async) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002100)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x3a0, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6d04894d}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x20, 0x0, 0x1, 0x3}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7688d9e2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000002300)=ANY=[@ANYBLOB="240100000550e1660e159d2abde97870b9d9ec70fe2228605c4117", @ANYRES16=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x20044001}, 0x4000010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001980), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000180000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c0000000000479dd9de3bc6e1c188b2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="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"], 0xd8}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002180), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0xc0, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cbf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x562644f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ac1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9640}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cc425c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d8676e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2290}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a0b6ccb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f4c04fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8061}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1df3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x534531a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a0358a4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fb96f30}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000002080)={0x3, 0xb}) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={0x0}}, 0xd7a2edb63254819) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e80)={0xffffffffffffffb5, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35b9812f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d140aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eaefc49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23eff2d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ec4a46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53bd8234}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4825c564}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e489798}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd80b814}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2acd880c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d885c2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c3b235e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x5b4b9582}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7be1c89f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf2a1c0e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x790447a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed97}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77f2e4a2}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) perf_event_open(&(0x7f0000001dc0)={0x5, 0x80, 0x3f, 0x7f, 0x80, 0x3, 0x0, 0x20, 0x4001, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x9}, 0x401, 0x2, 0x9, 0x7, 0x3, 0xc56, 0x5, 0x0, 0xff, 0x0, 0xffffffff}, r1, 0x8, r6, 0x8) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000080)={0x8}) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000002100)={0x6, &(0x7f00000020c0)=[0xff000000, 0xff, 0x7, 0x8001, 0x80, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)={r8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000002300)=ANY=[@ANYBLOB="240100000550e1660e159d2abde97870b9d9ec70fe2228605c4117", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf25020000000800010003000000a0000c803c000b800800090070cbb51108000a00bba800000800090096c4533108000a0019b4000008000900b0e4cb3a08000a003d9b000008000900660d4a6b3c000b8008000900b515b07808000a003d860000080009004f27271f080009006ecea74208000a0091c4000008000900e83eb33d08000a00c28b000024000b80080009006fcb017708000a00fae200000800090042c8f87c08000900b6b7b7592c000480050003000500000005000300060000000500030006000000050003000700000005000300000000003c0004800500030000000000050003000000000005000300000000000500030005000000050003000600000005000300000000000500030005000000"], 0x124}, 0x1, 0x0, 0x0, 0x20044001}, 0x4000010) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001980), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000180000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c0000000000479dd9de3bc6e1c188b2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="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"], 0xd8}, 0x0) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002180), r0) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0xc0, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cbf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x562644f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ac1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9640}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cc425c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d8676e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2290}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a0b6ccb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f4c04fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8061}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1df3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x534531a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a0358a4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fb96f30}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000002080)={0x3, 0xb}) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={0x0}}, 0xd7a2edb63254819) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e80)={0xffffffffffffffb5, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35b9812f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d140aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eaefc49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23eff2d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ec4a46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53bd8234}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4825c564}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e489798}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd80b814}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2acd880c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d885c2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c3b235e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x5b4b9582}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7be1c89f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf2a1c0e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x790447a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed97}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77f2e4a2}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) (async) perf_event_open(&(0x7f0000001dc0)={0x5, 0x80, 0x3f, 0x7f, 0x80, 0x3, 0x0, 0x20, 0x4001, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x9}, 0x401, 0x2, 0x9, 0x7, 0x3, 0xc56, 0x5, 0x0, 0xff, 0x0, 0xffffffff}, r1, 0x8, r6, 0x8) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000080)={0x8}) (async) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000002100)={0x6, &(0x7f00000020c0)=[0xff000000, 0xff, 0x7, 0x8001, 0x80, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)={r8}) (async) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x800, 0x401, 0x7fff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x401, 0x4, &(0x7f0000000040)=[0x7, 0x1f, 0x0, 0xaf], &(0x7f0000000080)=[0x1], &(0x7f00000000c0)=[0x1000, 0x8, 0x7, 0x8, 0x6, 0x1, 0x9], &(0x7f0000000100)=[0x5467, 0x2, 0x1, 0x9, 0x9], 0x0, 0x1}) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0xfffffffc, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080), 0x2}) 05:56:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x20, r1}) 05:56:44 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc86c5bde84313628}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r1, 0x557760ebe9182109, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30a3dd0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaefe8a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a7d17ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69b299e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e382e49}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31b8e741}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3736e0b3}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfdd099b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c1820a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bf6f7fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x557a4f73}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x4850}, 0x51) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x82000000) (async) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x5000) 05:56:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x800, 0x401, 0x7fff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x401, 0x4, &(0x7f0000000040)=[0x7, 0x1f, 0x0, 0xaf], &(0x7f0000000080)=[0x1], &(0x7f00000000c0)=[0x1000, 0x8, 0x7, 0x8, 0x6, 0x1, 0x9], &(0x7f0000000100)=[0x5467, 0x2, 0x1, 0x9, 0x9], 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x800, 0x401, 0x7fff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x401, 0x4, &(0x7f0000000040)=[0x7, 0x1f, 0x0, 0xaf], &(0x7f0000000080)=[0x1], &(0x7f00000000c0)=[0x1000, 0x8, 0x7, 0x8, 0x6, 0x1, 0x9], &(0x7f0000000100)=[0x5467, 0x2, 0x1, 0x9, 0x9], 0x0, 0x1}) (async) 05:56:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0xfffffffc, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080), 0x2}) (rerun: 64) 05:56:44 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc86c5bde84313628}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r1, 0x557760ebe9182109, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30a3dd0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaefe8a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a7d17ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69b299e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e382e49}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31b8e741}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3736e0b3}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfdd099b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c1820a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bf6f7fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x557a4f73}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x4850}, 0x51) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc86c5bde84313628}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r1, 0x557760ebe9182109, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30a3dd0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaefe8a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a7d17ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69b299e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e382e49}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31b8e741}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3736e0b3}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfdd099b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c1820a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bf6f7fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x557a4f73}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x4850}, 0x51) (async) 05:56:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x20, r1}) 05:56:44 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1b0b, 0x200) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x3000) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x4, 0x1f8a, 0x7, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)={0x55, 0x4, 0x55d0879c, "0d53ed638128dd2d3826391cb80a22c59c1ec1b2c0fc663c2471689a293b0040ee15c5c48f7b006ca0cbd48c8e0aed3f23d963af1e56571f35dea53054924a85f25e6c4daaa14d0930241f206db81fcc063c7acba4"}) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x2001) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000180), 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0xfffffffc, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080), 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0xfffffffc, 0xffffffff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080), 0x2}) (async) 05:56:44 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1b0b, 0x200) (async, rerun: 64) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x3000) (rerun: 64) 05:56:44 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc86c5bde84313628}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r1, 0x557760ebe9182109, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30a3dd0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaefe8a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a7d17ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69b299e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e382e49}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31b8e741}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3736e0b3}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfdd099b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c1820a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bf6f7fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x557a4f73}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x4850}, 0x51) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc86c5bde84313628}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r1, 0x557760ebe9182109, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30a3dd0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaefe8a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a7d17ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69b299e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e382e49}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31b8e741}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3736e0b3}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfdd099b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c1820a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bf6f7fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x557a4f73}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x4850}, 0x51) (async) 05:56:44 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x20, r1}) 05:56:44 executing program 0: getresuid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x160040) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x200102, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, 0xfffffffffffffffc) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000020, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776664c76f3d", @ANYRESHEX=r3, @ANYBLOB=',subj_type=/dev/dri/card#\x00,obj_role=,uid<', @ANYRESDEC=r0, @ANYBLOB="2c08e26e745f61707072610900652c6f626a5f6d61636b66737476736f6300"/49]) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x40000001, 0x4, 0x5, 0x0, 0x0}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000200)={r5}) 05:56:45 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1b0b, 0x200) (async) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x3000) 05:56:45 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x4, 0x1f8a, 0x7, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)={0x55, 0x4, 0x55d0879c, "0d53ed638128dd2d3826391cb80a22c59c1ec1b2c0fc663c2471689a293b0040ee15c5c48f7b006ca0cbd48c8e0aed3f23d963af1e56571f35dea53054924a85f25e6c4daaa14d0930241f206db81fcc063c7acba4"}) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x2001) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000180), 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x4, 0x1f8a, 0x7}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)={0x55, 0x4, 0x55d0879c, "0d53ed638128dd2d3826391cb80a22c59c1ec1b2c0fc663c2471689a293b0040ee15c5c48f7b006ca0cbd48c8e0aed3f23d963af1e56571f35dea53054924a85f25e6c4daaa14d0930241f206db81fcc063c7acba4"}) (async) syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x2001) (async) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000180), 0x4) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:45 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x0, 0xb0, 0x9}) 05:56:45 executing program 0: getresuid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x160040) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x200102, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, 0xfffffffffffffffc) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000020, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776664c76f3d", @ANYRESHEX=r3, @ANYBLOB=',subj_type=/dev/dri/card#\x00,obj_role=,uid<', @ANYRESDEC=r0, @ANYBLOB="2c08e26e745f61707072610900652c6f626a5f6d61636b66737476736f6300"/49]) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x40000001, 0x4, 0x5, 0x0, 0x0}) (async) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000200)={r5}) 05:56:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x200000000, 0x40000) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x81, 0x0, 0x9, 0x3, 0x0, 0x67, 0x40401, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffa541, 0x0, @perf_config_ext={0x16c}, 0x44800, 0x2, 0x8, 0x3, 0xeae, 0x809, 0x8, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 05:56:45 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x0, 0xb0, 0x9}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x0, 0xb0, 0x9}) (async) 05:56:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7ff, 0x400800) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000500), 0x10, &(0x7f0000000580)={&(0x7f0000000540)=@can={{0x3, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "57a836282f8dfda5"}, 0x10}, 0x1, 0x0, 0x0, 0x23e2c8b4adac92ca}, 0x4008010) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0xb6c, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000600)=0xfffffe01, 0x4) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000480)={0x0, 0xfffffffffffffffc, 0xd9, 0x0, @scatter={0x2, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000180)=""/232, 0xe8}]}, &(0x7f00000002c0)="d15d576ce20abf711a9de61996a84c56cb180075f589fd2cfa5659606c4ba64e883fe6ec1a170f3b6f8368df30585b8804013845728b2b57c05ba2f5189baaf64bd01a0dd9e554d771d9f08086af72e78643911974fce4791ccde3da47a7f5677a81025e2560ff48137aea8b362d2d2c3de83d2e4d2e432fd514a9fc196b3a93863cb0791d58d16e1251a91932de955922b425dbf8ab26064fdb406142e8d7a28c4f3073389b9e0d7f42b7e7f4d8a54e518de5d849ce66af75a74b37f34d297ca60edd156a8d505b72d96754ecbf79fe283ff0ff162b65fe7a", &(0x7f00000003c0)=""/68, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000440)}) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x3000) 05:56:45 executing program 0: getresuid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x160040) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x200102, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, 0xfffffffffffffffc) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000020, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776664c76f3d", @ANYRESHEX=r3, @ANYBLOB=',subj_type=/dev/dri/card#\x00,obj_role=,uid<', @ANYRESDEC=r0, @ANYBLOB="2c08e26e745f61707072610900652c6f626a5f6d61636b66737476736f6300"/49]) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x40000001, 0x4, 0x5, 0x0, 0x0}) (async) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000200)={r5}) 05:56:45 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x4, 0x1f8a, 0x7, 0x0, 0x0}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)={0x55, 0x4, 0x55d0879c, "0d53ed638128dd2d3826391cb80a22c59c1ec1b2c0fc663c2471689a293b0040ee15c5c48f7b006ca0cbd48c8e0aed3f23d963af1e56571f35dea53054924a85f25e6c4daaa14d0930241f206db81fcc063c7acba4"}) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x2001) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000180), 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x200000000, 0x40000) (async) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x81, 0x0, 0x9, 0x3, 0x0, 0x67, 0x40401, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffa541, 0x0, @perf_config_ext={0x16c}, 0x44800, 0x2, 0x8, 0x3, 0xeae, 0x809, 0x8, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 05:56:45 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x0, 0xb0, 0x9}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x0, 0xb0, 0x9}) (async) 05:56:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x191800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7ff, 0x400800) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) (async) sendmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000500), 0x10, &(0x7f0000000580)={&(0x7f0000000540)=@can={{0x3, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "57a836282f8dfda5"}, 0x10}, 0x1, 0x0, 0x0, 0x23e2c8b4adac92ca}, 0x4008010) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0xb6c, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000600)=0xfffffe01, 0x4) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000480)={0x0, 0xfffffffffffffffc, 0xd9, 0x0, @scatter={0x2, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000180)=""/232, 0xe8}]}, &(0x7f00000002c0)="d15d576ce20abf711a9de61996a84c56cb180075f589fd2cfa5659606c4ba64e883fe6ec1a170f3b6f8368df30585b8804013845728b2b57c05ba2f5189baaf64bd01a0dd9e554d771d9f08086af72e78643911974fce4791ccde3da47a7f5677a81025e2560ff48137aea8b362d2d2c3de83d2e4d2e432fd514a9fc196b3a93863cb0791d58d16e1251a91932de955922b425dbf8ab26064fdb406142e8d7a28c4f3073389b9e0d7f42b7e7f4d8a54e518de5d849ce66af75a74b37f34d297ca60edd156a8d505b72d96754ecbf79fe283ff0ff162b65fe7a", &(0x7f00000003c0)=""/68, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000440)}) (async) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x3000) 05:56:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) 05:56:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x200000000, 0x40000) (async) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x81, 0x0, 0x9, 0x3, 0x0, 0x67, 0x40401, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffa541, 0x0, @perf_config_ext={0x16c}, 0x44800, 0x2, 0x8, 0x3, 0xeae, 0x809, 0x8, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 05:56:45 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000500)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000540)={0x0, 0x0, 0x0, r1, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/105, 0x69}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10002) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, '\x00', 0x4, 0x7}) 05:56:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3800001, 0x12, 0xffffffffffffffff, 0x0) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x191800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB='traos=|d0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001fc0)=""/255, 0xff}, {&(0x7f00000020c0)=""/223, 0xdf}, {&(0x7f00000021c0)=""/253, 0xfd}], 0x3, &(0x7f0000002300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}], 0x4, 0x40, &(0x7f0000002540)={0x77359400}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000002580)) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$dri(&(0x7f0000000040), 0x3b8, 0x153640) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x3016c2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x191800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7ff, 0x400800) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) (async, rerun: 64) sendmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000500), 0x10, &(0x7f0000000580)={&(0x7f0000000540)=@can={{0x3, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "57a836282f8dfda5"}, 0x10}, 0x1, 0x0, 0x0, 0x23e2c8b4adac92ca}, 0x4008010) (async, rerun: 64) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0xb6c, 0x4) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000600)=0xfffffe01, 0x4) (rerun: 32) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000480)={0x0, 0xfffffffffffffffc, 0xd9, 0x0, @scatter={0x2, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000180)=""/232, 0xe8}]}, &(0x7f00000002c0)="d15d576ce20abf711a9de61996a84c56cb180075f589fd2cfa5659606c4ba64e883fe6ec1a170f3b6f8368df30585b8804013845728b2b57c05ba2f5189baaf64bd01a0dd9e554d771d9f08086af72e78643911974fce4791ccde3da47a7f5677a81025e2560ff48137aea8b362d2d2c3de83d2e4d2e432fd514a9fc196b3a93863cb0791d58d16e1251a91932de955922b425dbf8ab26064fdb406142e8d7a28c4f3073389b9e0d7f42b7e7f4d8a54e518de5d849ce66af75a74b37f34d297ca60edd156a8d505b72d96754ecbf79fe283ff0ff162b65fe7a", &(0x7f00000003c0)=""/68, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000440)}) (async) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x3000) 05:56:45 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000500)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000540)={0x0, 0x0, 0x0, r1, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/105, 0x69}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10002) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, '\x00', 0x4, 0x7}) 05:56:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3800001, 0x12, 0xffffffffffffffff, 0x0) 05:56:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB='traos=|d0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001fc0)=""/255, 0xff}, {&(0x7f00000020c0)=""/223, 0xdf}, {&(0x7f00000021c0)=""/253, 0xfd}], 0x3, &(0x7f0000002300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}], 0x4, 0x40, &(0x7f0000002540)={0x77359400}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000002580)) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) syz_open_dev$dri(&(0x7f0000000040), 0x3b8, 0x153640) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x3016c2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x68e01) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[0x1740c835, 0x9537, 0x9, 0x4, 0x1, 0x8000]}) 05:56:45 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x220180) syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x20800) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3bc) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff3000/0xc000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) epoll_create1(0x0) r1 = shmget(0x1, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x2000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3800001, 0x12, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3800001, 0x12, 0xffffffffffffffff, 0x0) (async) 05:56:45 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000500)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000540)={0x0, 0x0, 0x0, r1, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/105, 0x69}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10002) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, '\x00', 0x4, 0x7}) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000500)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000540)={0x0, 0x0, 0x0, r1, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/105, 0x69}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10002) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, '\x00', 0x4, 0x7}) (async) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) epoll_create1(0x0) r1 = shmget(0x1, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x2000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) epoll_create1(0x0) (async) shmget(0x1, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) (async) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x8, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 05:56:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB='traos=|d0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001fc0)=""/255, 0xff}, {&(0x7f00000020c0)=""/223, 0xdf}, {&(0x7f00000021c0)=""/253, 0xfd}], 0x3, &(0x7f0000002300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}], 0x4, 0x40, &(0x7f0000002540)={0x77359400}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000002580)) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) syz_open_dev$dri(&(0x7f0000000040), 0x3b8, 0x153640) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x3016c2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 05:56:45 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x220180) syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x20800) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3bc) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff3000/0xc000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x220180) (async) syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x20800) (async) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000100)) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3bc) (async) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ff3000/0xc000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) (async) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x68e01) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[0x1740c835, 0x9537, 0x9, 0x4, 0x1, 0x8000]}) 05:56:45 executing program 5: socketpair(0x27, 0x80000, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x7, 0x9e4f, 0x0, @loopback, @private2, 0x7800, 0x40, 0xdab, 0xb645}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001140)={0x4d4, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x45}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x40c, 0x8, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bd9eefa30bcf436e9dce12731933e3899258a007f24bc39273e9ef95463a712"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @mcast2, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_ALLOWEDIPS={0x0, 0x9, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @mcast1}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ipv6={{}, {0x0, 0x2, @mcast2}, {0x0, 0x3, 0x2}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @broadcast}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4d2ddcae689cb1044df8c3ae6477e4340ebee7200fb620dfa912a76e8bd07461"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40845}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) epoll_create1(0x0) (async) r1 = shmget(0x1, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x2000) (async, rerun: 64) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (rerun: 64) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x8, 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x68e01) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[0x1740c835, 0x9537, 0x9, 0x4, 0x1, 0x8000]}) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:45 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x220180) syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x20800) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3bc) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff3000/0xc000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x220180) (async) syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x20800) (async) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000100)) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe3bc) (async) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ff3000/0xc000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) (async) 05:56:45 executing program 5: socketpair(0x27, 0x80000, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x7, 0x9e4f, 0x0, @loopback, @private2, 0x7800, 0x40, 0xdab, 0xb645}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001140)={0x4d4, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x45}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x40c, 0x8, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bd9eefa30bcf436e9dce12731933e3899258a007f24bc39273e9ef95463a712"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @mcast2, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_ALLOWEDIPS={0x0, 0x9, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @mcast1}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ipv6={{}, {0x0, 0x2, @mcast2}, {0x0, 0x3, 0x2}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @broadcast}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4d2ddcae689cb1044df8c3ae6477e4340ebee7200fb620dfa912a76e8bd07461"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40845}, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x8, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 05:56:45 executing program 3: getuid() syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1ffffd}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x228d81, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x2, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x5279aa57, 0x101) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x40a00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0xffffffff, 0x201, 0xe033, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r5}) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/67, 0x43}], 0x3, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=0x10) 05:56:45 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 05:56:45 executing program 5: socketpair(0x27, 0x80000, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x7, 0x9e4f, 0x0, @loopback, @private2, 0x7800, 0x40, 0xdab, 0xb645}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001140)={0x4d4, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x45}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x40c, 0x8, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bd9eefa30bcf436e9dce12731933e3899258a007f24bc39273e9ef95463a712"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @mcast2, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_ALLOWEDIPS={0x0, 0x9, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @mcast1}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ipv6={{}, {0x0, 0x2, @mcast2}, {0x0, 0x3, 0x2}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @broadcast}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4d2ddcae689cb1044df8c3ae6477e4340ebee7200fb620dfa912a76e8bd07461"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40845}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) socketpair(0x27, 0x80000, 0x9, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x7, 0x9e4f, 0x0, @loopback, @private2, 0x7800, 0x40, 0xdab, 0xb645}}) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001140)={0x4d4, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x45}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x40c, 0x8, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bd9eefa30bcf436e9dce12731933e3899258a007f24bc39273e9ef95463a712"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @mcast2, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_ALLOWEDIPS={0x0, 0x9, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @mcast1}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ipv6={{}, {0x0, 0x2, @mcast2}, {0x0, 0x3, 0x2}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @broadcast}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4d2ddcae689cb1044df8c3ae6477e4340ebee7200fb620dfa912a76e8bd07461"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40845}, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) (async) 05:56:45 executing program 3: getuid() (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1ffffd}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x228d81, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x2, 0x1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x5279aa57, 0x101) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x40a00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0xffffffff, 0x201, 0xe033, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r5}) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/67, 0x43}], 0x3, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) (async) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=0x10) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/67, 0x43}], 0x3, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/67, 0x43}], 0x3, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) (async) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=0x10) 05:56:45 executing program 3: getuid() (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1ffffd}) (async, rerun: 32) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x228d81, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x2, 0x1}) (rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000140), 0x5279aa57, 0x101) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x40a00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0xffffffff, 0x201, 0xe033, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r5}) 05:56:45 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 05:56:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in6=@empty}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, '\x00', 0x1, 0x6}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffffffffffff, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000180)={r2}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000240)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x80000001, 0xa13}) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in6=@empty}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in6=@empty}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:45 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x0) (async) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) (async) 05:56:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x2000000}) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/51, 0x33}], 0x5, &(0x7f0000000580)=""/251, 0xfb}, 0x1) recvmmsg$unix(r1, &(0x7f0000003a00)=[{{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/250, 0xfa}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/63, 0x3f}, {&(0x7f0000000a40)=""/209, 0xd1}, {&(0x7f0000000b40)=""/141, 0x8d}], 0x1000000000000151}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/186, 0xba}, {&(0x7f0000000e40)=""/17, 0x11}, {&(0x7f0000000e80)=""/210, 0xd2}, {&(0x7f0000000f80)=""/141, 0x8d}, {&(0x7f0000001040)=""/51, 0x33}, {&(0x7f0000001080)=""/15, 0xf}], 0x7, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001200), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001280)=""/137, 0x89}, {&(0x7f0000001340)=""/16, 0x10}, {&(0x7f0000001380)=""/147, 0x93}, {&(0x7f0000001440)=""/189, 0xbd}], 0x4, &(0x7f0000001540)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000016c0)=""/23, 0x17}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3, &(0x7f0000003740)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003780)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003800)=""/162, 0xa2}, {&(0x7f00000038c0)=""/79, 0x4f}, {&(0x7f0000003940)=""/17, 0x11}, {&(0x7f0000003980)=""/62, 0x3e}], 0x4}}], 0x5, 0x23, &(0x7f0000003b40)) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000040)={0x1, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in6=@empty}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, '\x00', 0x1, 0x6}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffffffffffff, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000180)={r2}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000240)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x80000001, 0xa13}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, '\x00', 0x1, 0x6}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffffffffffff, 0x800) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000180)={r2}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000240)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x80000001, 0xa13}) (async) 05:56:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 05:56:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x2000000}) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/51, 0x33}], 0x5, &(0x7f0000000580)=""/251, 0xfb}, 0x1) recvmmsg$unix(r1, &(0x7f0000003a00)=[{{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/250, 0xfa}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/63, 0x3f}, {&(0x7f0000000a40)=""/209, 0xd1}, {&(0x7f0000000b40)=""/141, 0x8d}], 0x1000000000000151}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/186, 0xba}, {&(0x7f0000000e40)=""/17, 0x11}, {&(0x7f0000000e80)=""/210, 0xd2}, {&(0x7f0000000f80)=""/141, 0x8d}, {&(0x7f0000001040)=""/51, 0x33}, {&(0x7f0000001080)=""/15, 0xf}], 0x7, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001200), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001280)=""/137, 0x89}, {&(0x7f0000001340)=""/16, 0x10}, {&(0x7f0000001380)=""/147, 0x93}, {&(0x7f0000001440)=""/189, 0xbd}], 0x4, &(0x7f0000001540)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000016c0)=""/23, 0x17}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3, &(0x7f0000003740)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003780)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003800)=""/162, 0xa2}, {&(0x7f00000038c0)=""/79, 0x4f}, {&(0x7f0000003940)=""/17, 0x11}, {&(0x7f0000003980)=""/62, 0x3e}], 0x4}}], 0x5, 0x23, &(0x7f0000003b40)) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000040)={0x1, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/51, 0x33}], 0x5, &(0x7f0000000580)=""/251, 0xfb}, 0x1) (async) recvmmsg$unix(r1, &(0x7f0000003a00)=[{{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/250, 0xfa}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/63, 0x3f}, {&(0x7f0000000a40)=""/209, 0xd1}, {&(0x7f0000000b40)=""/141, 0x8d}], 0x1000000000000151}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/186, 0xba}, {&(0x7f0000000e40)=""/17, 0x11}, {&(0x7f0000000e80)=""/210, 0xd2}, {&(0x7f0000000f80)=""/141, 0x8d}, {&(0x7f0000001040)=""/51, 0x33}, {&(0x7f0000001080)=""/15, 0xf}], 0x7, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001200), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001280)=""/137, 0x89}, {&(0x7f0000001340)=""/16, 0x10}, {&(0x7f0000001380)=""/147, 0x93}, {&(0x7f0000001440)=""/189, 0xbd}], 0x4, &(0x7f0000001540)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000016c0)=""/23, 0x17}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3, &(0x7f0000003740)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003780)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003800)=""/162, 0xa2}, {&(0x7f00000038c0)=""/79, 0x4f}, {&(0x7f0000003940)=""/17, 0x11}, {&(0x7f0000003980)=""/62, 0x3e}], 0x4}}], 0x5, 0x23, &(0x7f0000003b40)) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000040)={0x1, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:46 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x7}) r3 = getpgid(r1) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) getpgid(r3) shmget(0x0, 0x2000, 0x54000940, &(0x7f0000ffd000/0x2000)=nil) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/177, 0xb1}], 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00100000"], 0x98}, 0x2000) 05:56:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x2000000}) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x1, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) (async, rerun: 32) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (rerun: 32) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, '\x00', 0x1, 0x6}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffffffffffff, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000180)={r2}) (async) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000240)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x80000001, 0xa13}) 05:56:46 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x7}) r3 = getpgid(r1) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) getpgid(r3) shmget(0x0, 0x2000, 0x54000940, &(0x7f0000ffd000/0x2000)=nil) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/177, 0xb1}], 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00100000"], 0x98}, 0x2000) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) getpgid(0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x7}) (async) getpgid(r1) (async) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) (async) getpgid(r3) (async) shmget(0x0, 0x2000, 0x54000940, &(0x7f0000ffd000/0x2000)=nil) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/177, 0xb1}], 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00100000"], 0x98}, 0x2000) (async) 05:56:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/51, 0x33}], 0x5, &(0x7f0000000580)=""/251, 0xfb}, 0x1) (rerun: 64) recvmmsg$unix(r1, &(0x7f0000003a00)=[{{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/250, 0xfa}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/63, 0x3f}, {&(0x7f0000000a40)=""/209, 0xd1}, {&(0x7f0000000b40)=""/141, 0x8d}], 0x1000000000000151}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/186, 0xba}, {&(0x7f0000000e40)=""/17, 0x11}, {&(0x7f0000000e80)=""/210, 0xd2}, {&(0x7f0000000f80)=""/141, 0x8d}, {&(0x7f0000001040)=""/51, 0x33}, {&(0x7f0000001080)=""/15, 0xf}], 0x7, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001200), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001280)=""/137, 0x89}, {&(0x7f0000001340)=""/16, 0x10}, {&(0x7f0000001380)=""/147, 0x93}, {&(0x7f0000001440)=""/189, 0xbd}], 0x4, &(0x7f0000001540)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000016c0)=""/23, 0x17}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3, &(0x7f0000003740)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003780)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003800)=""/162, 0xa2}, {&(0x7f00000038c0)=""/79, 0x4f}, {&(0x7f0000003940)=""/17, 0x11}, {&(0x7f0000003980)=""/62, 0x3e}], 0x4}}], 0x5, 0x23, &(0x7f0000003b40)) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000040)={0x1, 0x6}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:46 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x290000) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000200)={0x48, &(0x7f0000000180)=""/72}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x2, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) r2 = accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10, 0x0) accept4$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000080)=0x10, 0x80000) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x80000000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x101, 0x4, &(0x7f0000000240)=[0x100, 0x51, 0x1b0, 0x1298], &(0x7f0000000280)=[0x9, 0x0, 0x9, 0x6, 0x4, 0x0], &(0x7f00000002c0)=[0x5, 0x100, 0x3f, 0x0, 0x1000, 0x58dd], &(0x7f0000000300)=[0x1, 0x6104ba4d, 0xa0f2, 0x1, 0x914, 0x8], 0x0, 0xff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/246}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x1, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x1, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) (async) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000300)={0x5, 0x2, &(0x7f0000000240)=[0x6, 0x2], &(0x7f0000000280)=[0x1, 0x800, 0xc442, 0xfff7, 0xa12, 0x3f, 0x7fff], &(0x7f00000002c0)=[0x4, 0x0]}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080), 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffff000, 0x101000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r3}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x6000) 05:56:46 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x7}) (async, rerun: 32) r3 = getpgid(r1) (rerun: 32) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) (async, rerun: 32) getpgid(r3) (async, rerun: 32) shmget(0x0, 0x2000, 0x54000940, &(0x7f0000ffd000/0x2000)=nil) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/177, 0xb1}], 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00100000"], 0x98}, 0x2000) (rerun: 64) 05:56:46 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x290000) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000200)={0x48, &(0x7f0000000180)=""/72}) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x2, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) r2 = accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10, 0x0) accept4$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000080)=0x10, 0x80000) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x80000000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x101, 0x4, &(0x7f0000000240)=[0x100, 0x51, 0x1b0, 0x1298], &(0x7f0000000280)=[0x9, 0x0, 0x9, 0x6, 0x4, 0x0], &(0x7f00000002c0)=[0x5, 0x100, 0x3f, 0x0, 0x1000, 0x58dd], &(0x7f0000000300)=[0x1, 0x6104ba4d, 0xa0f2, 0x1, 0x914, 0x8], 0x0, 0xff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/246}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x80000000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x101, 0x4, &(0x7f0000000240)=[0x100, 0x51, 0x1b0, 0x1298], &(0x7f0000000280)=[0x9, 0x0, 0x9, 0x6, 0x4, 0x0], &(0x7f00000002c0)=[0x5, 0x100, 0x3f, 0x0, 0x1000, 0x58dd], &(0x7f0000000300)=[0x1, 0x6104ba4d, 0xa0f2, 0x1, 0x914, 0x8], 0x0, 0xff}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/246}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) [ 1902.467875] Unknown ioctl -1072667647 [ 1902.477888] Unknown ioctl -1070046020 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x1, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000300)={0x5, 0x2, &(0x7f0000000240)=[0x6, 0x2], &(0x7f0000000280)=[0x1, 0x800, 0xc442, 0xfff7, 0xa12, 0x3f, 0x7fff], &(0x7f00000002c0)=[0x4, 0x0]}) (async) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080), 0x0) (async, rerun: 32) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffff000, 0x101000) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r3}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x6000) [ 1902.549604] Unknown ioctl -1070046020 [ 1902.572840] Unknown ioctl -1070046020 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x80000000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x101, 0x4, &(0x7f0000000240)=[0x100, 0x51, 0x1b0, 0x1298], &(0x7f0000000280)=[0x9, 0x0, 0x9, 0x6, 0x4, 0x0], &(0x7f00000002c0)=[0x5, 0x100, 0x3f, 0x0, 0x1000, 0x58dd], &(0x7f0000000300)=[0x1, 0x6104ba4d, 0xa0f2, 0x1, 0x914, 0x8], 0x0, 0xff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/246}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x80000000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000340)={0x101, 0x4, &(0x7f0000000240)=[0x100, 0x51, 0x1b0, 0x1298], &(0x7f0000000280)=[0x9, 0x0, 0x9, 0x6, 0x4, 0x0], &(0x7f00000002c0)=[0x5, 0x100, 0x3f, 0x0, 0x1000, 0x58dd], &(0x7f0000000300)=[0x1, 0x6104ba4d, 0xa0f2, 0x1, 0x914, 0x8], 0x0, 0xff}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/246}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) 05:56:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/121, 0x79}, {0xfffffffffffffffc}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/18, 0x12}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000001640)=""/88, 0x58}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/219, 0xdb}, {&(0x7f00000037c0)=""/165, 0xa5}], 0x5, &(0x7f0000003900)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/184, 0xb8}, {&(0x7f0000003a00)=""/77, 0x4d}, {&(0x7f0000003a80)=""/135, 0x87}], 0x3}}], 0x3, 0x40010002, &(0x7f0000003c40)={0x0, 0x989680}) accept4$unix(r0, &(0x7f0000003c80)=@abs, &(0x7f0000003d00)=0x6e, 0x800) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) [ 1902.596165] Unknown ioctl -1072667647 05:56:46 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x290000) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000200)={0x48, &(0x7f0000000180)=""/72}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x2, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) r2 = accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10, 0x0) accept4$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000080)=0x10, 0x80000) syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x290000) (async) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000200)={0x48, &(0x7f0000000180)=""/72}) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x2, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) (async) accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10, 0x0) (async) accept4$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000080)=0x10, 0x80000) (async) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x3, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000300)={0x5, 0x2, &(0x7f0000000240)=[0x6, 0x2], &(0x7f0000000280)=[0x1, 0x800, 0xc442, 0xfff7, 0xa12, 0x3f, 0x7fff], &(0x7f00000002c0)=[0x4, 0x0]}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080), 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffff000, 0x101000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r3}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x6000) 05:56:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/121, 0x79}, {0xfffffffffffffffc}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/18, 0x12}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000001640)=""/88, 0x58}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/219, 0xdb}, {&(0x7f00000037c0)=""/165, 0xa5}], 0x5, &(0x7f0000003900)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/184, 0xb8}, {&(0x7f0000003a00)=""/77, 0x4d}, {&(0x7f0000003a80)=""/135, 0x87}], 0x3}}], 0x3, 0x40010002, &(0x7f0000003c40)={0x0, 0x989680}) accept4$unix(r0, &(0x7f0000003c80)=@abs, &(0x7f0000003d00)=0x6e, 0x800) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/121, 0x79}, {0xfffffffffffffffc}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/18, 0x12}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000001640)=""/88, 0x58}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/219, 0xdb}, {&(0x7f00000037c0)=""/165, 0xa5}], 0x5, &(0x7f0000003900)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/184, 0xb8}, {&(0x7f0000003a00)=""/77, 0x4d}, {&(0x7f0000003a80)=""/135, 0x87}], 0x3}}], 0x3, 0x40010002, &(0x7f0000003c40)={0x0, 0x989680}) (async) accept4$unix(r0, &(0x7f0000003c80)=@abs, &(0x7f0000003d00)=0x6e, 0x800) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) [ 1902.623424] Unknown ioctl -1070046020 [ 1902.628550] Unknown ioctl -1070046020 05:56:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/168, 0xa8}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/234, 0xea}, {&(0x7f00000007c0)=""/74, 0x4a}, {&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/7, 0x7}], 0x7, &(0x7f0000000980)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/184, 0xb8}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/172, 0xac}, {&(0x7f0000000e40)=""/128, 0x80}, {&(0x7f0000000ec0)=""/198, 0xc6}], 0x7, &(0x7f0000001040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000001180)=""/98, 0x62}, {&(0x7f0000001200)=""/197, 0xc5}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/144, 0x90}, {&(0x7f00000023c0)=""/161, 0xa1}, {&(0x7f0000002480)=""/140, 0x8c}, {&(0x7f0000002540)=""/192, 0xc0}], 0x7, &(0x7f0000002680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000026c0)=""/8, 0x8}, {&(0x7f0000002700)=""/30, 0x1e}, {&(0x7f0000002740)=""/55, 0x37}, {&(0x7f0000002780)=""/2, 0x2}, {&(0x7f00000027c0)=""/141, 0x8d}, {&(0x7f0000002880)=""/88, 0x58}, {&(0x7f0000002900)=""/158, 0x9e}], 0x7, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/99, 0x63}, {&(0x7f0000002c40)=""/12, 0xc}], 0x2, &(0x7f0000002cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x6, 0x124, &(0x7f0000002f00)={0x77359400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000002f40)={0xff, 0x1, 0x6}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x88042, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000003040)={0x5, 0x2, &(0x7f0000002f80)=[0x6, 0x1000], &(0x7f0000002fc0)=[0x3, 0x4, 0x2000], &(0x7f0000003000)=[0x5, 0x9, 0x7, 0x8, 0x8000, 0x7ff]}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) [ 1902.685282] Unknown ioctl -1072667647 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x3, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) 05:56:46 executing program 5: r0 = shmget(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x10001}) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1fc000000000000, 0x602000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7f, 0x5, &(0x7f0000000080)=[0x6, 0x0, 0x2, 0x8001, 0x2], &(0x7f00000000c0)=[0x401, 0x0, 0x80, 0x2, 0x8, 0x1ff], &(0x7f0000000100)=[0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/121, 0x79}, {0xfffffffffffffffc}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/18, 0x12}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000001640)=""/88, 0x58}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/219, 0xdb}, {&(0x7f00000037c0)=""/165, 0xa5}], 0x5, &(0x7f0000003900)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/184, 0xb8}, {&(0x7f0000003a00)=""/77, 0x4d}, {&(0x7f0000003a80)=""/135, 0x87}], 0x3}}], 0x3, 0x40010002, &(0x7f0000003c40)={0x0, 0x989680}) accept4$unix(r0, &(0x7f0000003c80)=@abs, &(0x7f0000003d00)=0x6e, 0x800) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/121, 0x79}, {0xfffffffffffffffc}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/18, 0x12}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000001640)=""/88, 0x58}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/219, 0xdb}, {&(0x7f00000037c0)=""/165, 0xa5}], 0x5, &(0x7f0000003900)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/184, 0xb8}, {&(0x7f0000003a00)=""/77, 0x4d}, {&(0x7f0000003a80)=""/135, 0x87}], 0x3}}], 0x3, 0x40010002, &(0x7f0000003c40)={0x0, 0x989680}) (async) accept4$unix(r0, &(0x7f0000003c80)=@abs, &(0x7f0000003d00)=0x6e, 0x800) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) [ 1902.722887] Unknown ioctl -1071618908 05:56:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/168, 0xa8}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/234, 0xea}, {&(0x7f00000007c0)=""/74, 0x4a}, {&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/7, 0x7}], 0x7, &(0x7f0000000980)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/184, 0xb8}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/172, 0xac}, {&(0x7f0000000e40)=""/128, 0x80}, {&(0x7f0000000ec0)=""/198, 0xc6}], 0x7, &(0x7f0000001040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000001180)=""/98, 0x62}, {&(0x7f0000001200)=""/197, 0xc5}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/144, 0x90}, {&(0x7f00000023c0)=""/161, 0xa1}, {&(0x7f0000002480)=""/140, 0x8c}, {&(0x7f0000002540)=""/192, 0xc0}], 0x7, &(0x7f0000002680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000026c0)=""/8, 0x8}, {&(0x7f0000002700)=""/30, 0x1e}, {&(0x7f0000002740)=""/55, 0x37}, {&(0x7f0000002780)=""/2, 0x2}, {&(0x7f00000027c0)=""/141, 0x8d}, {&(0x7f0000002880)=""/88, 0x58}, {&(0x7f0000002900)=""/158, 0x9e}], 0x7, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/99, 0x63}, {&(0x7f0000002c40)=""/12, 0xc}], 0x2, &(0x7f0000002cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x6, 0x124, &(0x7f0000002f00)={0x77359400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000002f40)={0xff, 0x1, 0x6}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x88042, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000003040)={0x5, 0x2, &(0x7f0000002f80)=[0x6, 0x1000], &(0x7f0000002fc0)=[0x3, 0x4, 0x2000], &(0x7f0000003000)=[0x5, 0x9, 0x7, 0x8, 0x8000, 0x7ff]}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/168, 0xa8}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/234, 0xea}, {&(0x7f00000007c0)=""/74, 0x4a}, {&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/7, 0x7}], 0x7, &(0x7f0000000980)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/184, 0xb8}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/172, 0xac}, {&(0x7f0000000e40)=""/128, 0x80}, {&(0x7f0000000ec0)=""/198, 0xc6}], 0x7, &(0x7f0000001040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000001180)=""/98, 0x62}, {&(0x7f0000001200)=""/197, 0xc5}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/144, 0x90}, {&(0x7f00000023c0)=""/161, 0xa1}, {&(0x7f0000002480)=""/140, 0x8c}, {&(0x7f0000002540)=""/192, 0xc0}], 0x7, &(0x7f0000002680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000026c0)=""/8, 0x8}, {&(0x7f0000002700)=""/30, 0x1e}, {&(0x7f0000002740)=""/55, 0x37}, {&(0x7f0000002780)=""/2, 0x2}, {&(0x7f00000027c0)=""/141, 0x8d}, {&(0x7f0000002880)=""/88, 0x58}, {&(0x7f0000002900)=""/158, 0x9e}], 0x7, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/99, 0x63}, {&(0x7f0000002c40)=""/12, 0xc}], 0x2, &(0x7f0000002cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x6, 0x124, &(0x7f0000002f00)={0x77359400}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000002f40)={0xff, 0x1, 0x6}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x88042, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000003040)={0x5, 0x2, &(0x7f0000002f80)=[0x6, 0x1000], &(0x7f0000002fc0)=[0x3, 0x4, 0x2000], &(0x7f0000003000)=[0x5, 0x9, 0x7, 0x8, 0x8000, 0x7ff]}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) (async) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x3, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) [ 1902.755994] Unknown ioctl -1073191745 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 05:56:46 executing program 5: r0 = shmget(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x10001}) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1fc000000000000, 0x602000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7f, 0x5, &(0x7f0000000080)=[0x6, 0x0, 0x2, 0x8001, 0x2], &(0x7f00000000c0)=[0x401, 0x0, 0x80, 0x2, 0x8, 0x1ff], &(0x7f0000000100)=[0x2]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x13000, 0x78000000, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmat(r1, &(0x7f0000a98000/0x4000)=nil, 0x2000) 05:56:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/235, 0xeb}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000004c0)=""/105, 0x69}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000940)=""/1, 0x1}, {&(0x7f0000000980)=""/181, 0xb5}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/9, 0x9}, {&(0x7f0000001a80)=""/141, 0x8d}], 0x9, &(0x7f0000001c00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/247, 0xf7}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001ec0)=""/20, 0x14}], 0x1, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002000)=""/56, 0x38}, {&(0x7f0000002040)=""/215, 0xd7}, {&(0x7f0000002140)=""/189, 0xbd}], 0x3, &(0x7f0000002240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x6, 0x1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 05:56:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) 05:56:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/168, 0xa8}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/234, 0xea}, {&(0x7f00000007c0)=""/74, 0x4a}, {&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/7, 0x7}], 0x7, &(0x7f0000000980)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/184, 0xb8}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/172, 0xac}, {&(0x7f0000000e40)=""/128, 0x80}, {&(0x7f0000000ec0)=""/198, 0xc6}], 0x7, &(0x7f0000001040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000001180)=""/98, 0x62}, {&(0x7f0000001200)=""/197, 0xc5}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/144, 0x90}, {&(0x7f00000023c0)=""/161, 0xa1}, {&(0x7f0000002480)=""/140, 0x8c}, {&(0x7f0000002540)=""/192, 0xc0}], 0x7, &(0x7f0000002680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000026c0)=""/8, 0x8}, {&(0x7f0000002700)=""/30, 0x1e}, {&(0x7f0000002740)=""/55, 0x37}, {&(0x7f0000002780)=""/2, 0x2}, {&(0x7f00000027c0)=""/141, 0x8d}, {&(0x7f0000002880)=""/88, 0x58}, {&(0x7f0000002900)=""/158, 0x9e}], 0x7, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/99, 0x63}, {&(0x7f0000002c40)=""/12, 0xc}], 0x2, &(0x7f0000002cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x6, 0x124, &(0x7f0000002f00)={0x77359400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000002f40)={0xff, 0x1, 0x6}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x88042, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000003040)={0x5, 0x2, &(0x7f0000002f80)=[0x6, 0x1000], &(0x7f0000002fc0)=[0x3, 0x4, 0x2000], &(0x7f0000003000)=[0x5, 0x9, 0x7, 0x8, 0x8000, 0x7ff]}) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x13000, 0x78000000, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmat(r1, &(0x7f0000a98000/0x4000)=nil, 0x2000) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async) shmget$private(0x0, 0x13000, 0x78000000, &(0x7f0000feb000/0x13000)=nil) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) shmat(r1, &(0x7f0000a98000/0x4000)=nil, 0x2000) (async) [ 1902.825763] Unknown ioctl -1071618908 [ 1902.835993] Unknown ioctl -1073191745 [ 1902.853504] Unknown ioctl -1071618908 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1fc000000000000, 0x602000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7f, 0x5, &(0x7f0000000080)=[0x6, 0x0, 0x2, 0x8001, 0x2], &(0x7f00000000c0)=[0x401, 0x0, 0x80, 0x2, 0x8, 0x1ff], &(0x7f0000000100)=[0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x1fc000000000000, 0x602000) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7f, 0x5, &(0x7f0000000080)=[0x6, 0x0, 0x2, 0x8001, 0x2], &(0x7f00000000c0)=[0x401, 0x0, 0x80, 0x2, 0x8, 0x1ff], &(0x7f0000000100)=[0x2]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) 05:56:46 executing program 5: r0 = shmget(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x10001}) shmget(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x10001}) (async) 05:56:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/235, 0xeb}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000004c0)=""/105, 0x69}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000940)=""/1, 0x1}, {&(0x7f0000000980)=""/181, 0xb5}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/9, 0x9}, {&(0x7f0000001a80)=""/141, 0x8d}], 0x9, &(0x7f0000001c00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/247, 0xf7}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001ec0)=""/20, 0x14}], 0x1, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002000)=""/56, 0x38}, {&(0x7f0000002040)=""/215, 0xd7}, {&(0x7f0000002140)=""/189, 0xbd}], 0x3, &(0x7f0000002240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x6, 0x1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x13000, 0x78000000, &(0x7f0000feb000/0x13000)=nil) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmat(r1, &(0x7f0000a98000/0x4000)=nil, 0x2000) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[0x2, 0x7, 0x9, 0x1, 0x6, 0xffffffd6, 0xb3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) [ 1902.947766] Unknown ioctl -1071618908 [ 1902.966565] Unknown ioctl -1073191745 05:56:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast2, @in6=@remote}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/235, 0xeb}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000004c0)=""/105, 0x69}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000940)=""/1, 0x1}, {&(0x7f0000000980)=""/181, 0xb5}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/9, 0x9}, {&(0x7f0000001a80)=""/141, 0x8d}], 0x9, &(0x7f0000001c00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/247, 0xf7}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001ec0)=""/20, 0x14}], 0x1, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002000)=""/56, 0x38}, {&(0x7f0000002040)=""/215, 0xd7}, {&(0x7f0000002140)=""/189, 0xbd}], 0x3, &(0x7f0000002240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x6, 0x1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/235, 0xeb}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000004c0)=""/105, 0x69}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000940)=""/1, 0x1}, {&(0x7f0000000980)=""/181, 0xb5}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/9, 0x9}, {&(0x7f0000001a80)=""/141, 0x8d}], 0x9, &(0x7f0000001c00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/247, 0xf7}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001ec0)=""/20, 0x14}], 0x1, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002000)=""/56, 0x38}, {&(0x7f0000002040)=""/215, 0xd7}, {&(0x7f0000002140)=""/189, 0xbd}], 0x3, &(0x7f0000002240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x6, 0x1, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = getpgid(0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}], 0x5, 0x0, '\x00', 0x1, 0x2}) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) waitid(0x1, r2, &(0x7f00000001c0), 0x1, &(0x7f0000000240)) r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r3) shmdt(r3) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[0x2, 0x7, 0x9, 0x1, 0x6, 0xffffffd6, 0xb3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[0x2, 0x7, 0x9, 0x1, 0x6, 0xffffffd6, 0xb3]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r1) shmdt(r1) r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r2) shmdt(r2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast2, @in6=@remote}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=[0x140000, 0xfff, 0x7f], &(0x7f0000000140)=[0x80000001, 0xfff, 0x6, 0x5, 0x9, 0x7, 0x4, 0x10000, 0x1000, 0x8001], 0x11, 0x8, 0x5, &(0x7f0000000180)=[0x101, 0x8, 0x0, 0x9, 0xf75, 0x4, 0x9, 0x7], &(0x7f00000001c0)=[0x4, 0x2]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[0x2, 0x7, 0x9, 0x1, 0x6, 0xffffffd6, 0xb3]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=[0x140000, 0xfff, 0x7f], &(0x7f0000000140)=[0x80000001, 0xfff, 0x6, 0x5, 0x9, 0x7, 0x4, 0x10000, 0x1000, 0x8001], 0x11, 0x8, 0x5, &(0x7f0000000180)=[0x101, 0x8, 0x0, 0x9, 0xf75, 0x4, 0x9, 0x7], &(0x7f00000001c0)=[0x4, 0x2]}) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) 05:56:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) (async) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r1) (async) shmdt(r1) (async) r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r2) shmdt(r2) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast2, @in6=@remote}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = getpgid(0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}], 0x5, 0x0, '\x00', 0x1, 0x2}) (async) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) waitid(0x1, r2, &(0x7f00000001c0), 0x1, &(0x7f0000000240)) (async) r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r3) (async) shmdt(r3) 05:56:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=[0x140000, 0xfff, 0x7f], &(0x7f0000000140)=[0x80000001, 0xfff, 0x6, 0x5, 0x9, 0x7, 0x4, 0x10000, 0x1000, 0x8001], 0x11, 0x8, 0x5, &(0x7f0000000180)=[0x101, 0x8, 0x0, 0x9, 0xf75, 0x4, 0x9, 0x7], &(0x7f00000001c0)=[0x4, 0x2]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x8}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=[0x140000, 0xfff, 0x7f], &(0x7f0000000140)=[0x80000001, 0xfff, 0x6, 0x5, 0x9, 0x7, 0x4, 0x10000, 0x1000, 0x8001], 0x11, 0x8, 0x5, &(0x7f0000000180)=[0x101, 0x8, 0x0, 0x9, 0xf75, 0x4, 0x9, 0x7], &(0x7f00000001c0)=[0x4, 0x2]}) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r4, 0x0, r5], 0x5}) 05:56:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r1) (async) shmdt(r1) (async, rerun: 64) r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) (rerun: 64) shmdt(r2) (async) shmdt(r2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:46 executing program 5: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 05:56:46 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = getpgid(0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}], 0x5, 0x0, '\x00', 0x1, 0x2}) (async) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) waitid(0x1, r2, &(0x7f00000001c0), 0x1, &(0x7f0000000240)) r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r3) (async) shmdt(r3) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r4, 0x0, r5], 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r4, 0x0, r5], 0x5}) (async) 05:56:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r2, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x144, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x62}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20000045) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0x800005, 0x0, 0x1}) 05:56:46 executing program 5: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) (async) 05:56:47 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x4b, 0x4, 0x5, "9c95899d67efd99c06e3864a82fb41284ef4f94fadccad5e46f2674f93ae20657bccb7d019f11d3d52bba4ef982556ff9356043ab74f310b3b309b246cc64e115a1db60bbb619f257c7006"}) socket$phonet(0x23, 0x2, 0x1) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r4, 0x0, r5], 0x5}) 05:56:47 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x4b, 0x4, 0x5, "9c95899d67efd99c06e3864a82fb41284ef4f94fadccad5e46f2674f93ae20657bccb7d019f11d3d52bba4ef982556ff9356043ab74f310b3b309b246cc64e115a1db60bbb619f257c7006"}) socket$phonet(0x23, 0x2, 0x1) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x4b, 0x4, 0x5, "9c95899d67efd99c06e3864a82fb41284ef4f94fadccad5e46f2674f93ae20657bccb7d019f11d3d52bba4ef982556ff9356043ab74f310b3b309b246cc64e115a1db60bbb619f257c7006"}) (async) socket$phonet(0x23, 0x2, 0x1) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:47 executing program 5: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 05:56:47 executing program 4: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) clock_gettime(0x0, &(0x7f00000030c0)={0x0, 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="8314353883f4028ccdaf1d43d5526f1b2805a90000000100ced4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="040200001c0000e6f4f214c918fcd8f11dc781385bff586f3f6ee07ac2b3c365549d1a0acac76b970400000000000000695f34bab6dc344949c684a977a5d792810e0f3dfa7ca8e33a4221b9919ce94b5aa6bcb645a67981997a819dc172fac4e5a58baf4440efebf1866a00"/123, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f00000001c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000003140)=""/170, 0xaa}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/73, 0x49}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000800)=""/251, 0xfb}], 0x3}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000003200)=""/4098, 0x1002}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/84, 0x54}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/198, 0xc6}, {&(0x7f0000002b80)=""/122, 0x7a}, {&(0x7f0000002c00)=""/70, 0x46}, {&(0x7f0000002c80)=""/190, 0xbe}, {&(0x7f0000002d40)=""/245, 0xf5}, {&(0x7f0000002e40)=""/9, 0x9}], 0xa, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x4, 0x1, &(0x7f0000003100)={r1, r2+10000000}) clock_gettime(0x2, &(0x7f0000000340)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000a00)={&(0x7f0000000380)=[r6, 0x0], &(0x7f00000009c0)=[0x0, 0x0, r7], 0x2}) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xf8) r8 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r8) shmdt(r8) 05:56:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0xc4042, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000007c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000800)={r4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000003c0)={&(0x7f0000000080)=[r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, r5, r6, r7], 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) socketpair(0x0, 0xa, 0x9, &(0x7f0000000400)={0xffffffffffffffff}) recvmsg$can_bcm(r8, &(0x7f0000000780)={&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/163, 0xa3}], 0x3, &(0x7f0000000740)=""/46, 0x2e}, 0x180) 05:56:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r2, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x144, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x62}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20000045) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0x800005, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r2, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x144, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x62}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20000045) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0x800005, 0x0, 0x1}) (async) 05:56:47 executing program 5: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6b, 0x3, 0x1, 0xff, 0x0, 0x1, 0x811a0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x3, 0xd18, 0x1, 0x5, 0x8, 0x6, 0x0, 0x10001, 0x0, 0x100000000}, r0, 0x10, 0xffffffffffffffff, 0x9) geteuid() shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) waitid(0x1, r1, &(0x7f0000000000), 0x20000000, &(0x7f0000000080)) 05:56:47 executing program 4: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) clock_gettime(0x0, &(0x7f00000030c0)={0x0, 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="8314353883f4028ccdaf1d43d5526f1b2805a90000000100ced4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="040200001c0000e6f4f214c918fcd8f11dc781385bff586f3f6ee07ac2b3c365549d1a0acac76b970400000000000000695f34bab6dc344949c684a977a5d792810e0f3dfa7ca8e33a4221b9919ce94b5aa6bcb645a67981997a819dc172fac4e5a58baf4440efebf1866a00"/123, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f00000001c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000003140)=""/170, 0xaa}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/73, 0x49}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000800)=""/251, 0xfb}], 0x3}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000003200)=""/4098, 0x1002}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/84, 0x54}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/198, 0xc6}, {&(0x7f0000002b80)=""/122, 0x7a}, {&(0x7f0000002c00)=""/70, 0x46}, {&(0x7f0000002c80)=""/190, 0xbe}, {&(0x7f0000002d40)=""/245, 0xf5}, {&(0x7f0000002e40)=""/9, 0x9}], 0xa, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x4, 0x1, &(0x7f0000003100)={r1, r2+10000000}) clock_gettime(0x2, &(0x7f0000000340)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000a00)={&(0x7f0000000380)=[r6, 0x0], &(0x7f00000009c0)=[0x0, 0x0, r7], 0x2}) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xf8) r8 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r8) shmdt(r8) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) clock_gettime(0x0, &(0x7f00000030c0)) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r3, 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="8314353883f4028ccdaf1d43d5526f1b2805a90000000100ced4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="040200001c0000e6f4f214c918fcd8f11dc781385bff586f3f6ee07ac2b3c365549d1a0acac76b970400000000000000695f34bab6dc344949c684a977a5d792810e0f3dfa7ca8e33a4221b9919ce94b5aa6bcb645a67981997a819dc172fac4e5a58baf4440efebf1866a00"/123, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f00000001c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000003140)=""/170, 0xaa}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/73, 0x49}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000800)=""/251, 0xfb}], 0x3}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000003200)=""/4098, 0x1002}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/84, 0x54}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/198, 0xc6}, {&(0x7f0000002b80)=""/122, 0x7a}, {&(0x7f0000002c00)=""/70, 0x46}, {&(0x7f0000002c80)=""/190, 0xbe}, {&(0x7f0000002d40)=""/245, 0xf5}, {&(0x7f0000002e40)=""/9, 0x9}], 0xa, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x4, 0x1, &(0x7f0000003100)={r1, r2+10000000}) (async) clock_gettime(0x2, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000a00)={&(0x7f0000000380)=[r6, 0x0], &(0x7f00000009c0)=[0x0, 0x0, r7], 0x2}) (async) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xf8) (async) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) (async) shmdt(r8) (async) shmdt(r8) (async) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:47 executing program 5: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6b, 0x3, 0x1, 0xff, 0x0, 0x1, 0x811a0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x3, 0xd18, 0x1, 0x5, 0x8, 0x6, 0x0, 0x10001, 0x0, 0x100000000}, r0, 0x10, 0xffffffffffffffff, 0x9) (async) geteuid() shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) (async) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) (async, rerun: 64) waitid(0x1, r1, &(0x7f0000000000), 0x20000000, &(0x7f0000000080)) (rerun: 64) 05:56:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r2, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x144, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x62}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20000045) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0x800005, 0x0, 0x1}) 05:56:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0xc4042, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000007c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000800)={r4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000003c0)={&(0x7f0000000080)=[r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, r5, r6, r7], 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) socketpair(0x0, 0xa, 0x9, &(0x7f0000000400)={0xffffffffffffffff}) recvmsg$can_bcm(r8, &(0x7f0000000780)={&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/163, 0xa3}], 0x3, &(0x7f0000000740)=""/46, 0x2e}, 0x180) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0xc4042, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000007c0)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000800)={r4, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000003c0)={&(0x7f0000000080)=[r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, r5, r6, r7], 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) socketpair(0x0, 0xa, 0x9, &(0x7f0000000400)) (async) recvmsg$can_bcm(r8, &(0x7f0000000780)={&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/163, 0xa3}], 0x3, &(0x7f0000000740)=""/46, 0x2e}, 0x180) (async) 05:56:47 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x4b, 0x4, 0x5, "9c95899d67efd99c06e3864a82fb41284ef4f94fadccad5e46f2674f93ae20657bccb7d019f11d3d52bba4ef982556ff9356043ab74f310b3b309b246cc64e115a1db60bbb619f257c7006"}) socket$phonet(0x23, 0x2, 0x1) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x4b, 0x4, 0x5, "9c95899d67efd99c06e3864a82fb41284ef4f94fadccad5e46f2674f93ae20657bccb7d019f11d3d52bba4ef982556ff9356043ab74f310b3b309b246cc64e115a1db60bbb619f257c7006"}) (async) socket$phonet(0x23, 0x2, 0x1) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:47 executing program 4: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) clock_gettime(0x0, &(0x7f00000030c0)={0x0, 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="8314353883f4028ccdaf1d43d5526f1b2805a90000000100ced4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="040200001c0000e6f4f214c918fcd8f11dc781385bff586f3f6ee07ac2b3c365549d1a0acac76b970400000000000000695f34bab6dc344949c684a977a5d792810e0f3dfa7ca8e33a4221b9919ce94b5aa6bcb645a67981997a819dc172fac4e5a58baf4440efebf1866a00"/123, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f00000001c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000003140)=""/170, 0xaa}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/73, 0x49}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000800)=""/251, 0xfb}], 0x3}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000003200)=""/4098, 0x1002}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/84, 0x54}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/198, 0xc6}, {&(0x7f0000002b80)=""/122, 0x7a}, {&(0x7f0000002c00)=""/70, 0x46}, {&(0x7f0000002c80)=""/190, 0xbe}, {&(0x7f0000002d40)=""/245, 0xf5}, {&(0x7f0000002e40)=""/9, 0x9}], 0xa, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x4, 0x1, &(0x7f0000003100)={r1, r2+10000000}) clock_gettime(0x2, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000000180)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000a00)={&(0x7f0000000380)=[r6, 0x0], &(0x7f00000009c0)=[0x0, 0x0, r7], 0x2}) (async) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xf8) r8 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r8) (async) shmdt(r8) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:47 executing program 5: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6b, 0x3, 0x1, 0xff, 0x0, 0x1, 0x811a0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x3, 0xd18, 0x1, 0x5, 0x8, 0x6, 0x0, 0x10001, 0x0, 0x100000000}, r0, 0x10, 0xffffffffffffffff, 0x9) (async) geteuid() (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) (async) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) (async) waitid(0x1, r1, &(0x7f0000000000), 0x20000000, &(0x7f0000000080)) 05:56:47 executing program 1: epoll_create(0xffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0xfffffffd, &(0x7f0000000140), 0x8) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x48, 0xfffffffffffffffe) 05:56:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x1, 0x200}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0xc4042, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000007c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000800)={r4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000003c0)={&(0x7f0000000080)=[r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, r5, r6, r7], 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) socketpair(0x0, 0xa, 0x9, &(0x7f0000000400)={0xffffffffffffffff}) recvmsg$can_bcm(r8, &(0x7f0000000780)={&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/163, 0xa3}], 0x3, &(0x7f0000000740)=""/46, 0x2e}, 0x180) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0xc4042, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000007c0)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000800)={r4, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000003c0)={&(0x7f0000000080)=[r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, r5, r6, r7], 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) socketpair(0x0, 0xa, 0x9, &(0x7f0000000400)) (async) recvmsg$can_bcm(r8, &(0x7f0000000780)={&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/163, 0xa3}], 0x3, &(0x7f0000000740)=""/46, 0x2e}, 0x180) (async) 05:56:47 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x4000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000100)={r0, &(0x7f0000000080)=""/83}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000002c0)={r1, 0xa, &(0x7f00000001c0)=[0x9, 0x8, 0x101, 0x0, 0x40, 0x4, 0xff, 0x8001, 0x0, 0x8], &(0x7f0000000200)=[0xfffffffd], 0x83355a0791e04299, 0x3, 0x40, &(0x7f0000000240)=[0xa692, 0x3, 0x4d8], &(0x7f0000000280)=[0xba1]}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 05:56:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x1, 0x200}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x1, 0x200}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) 05:56:47 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) 05:56:47 executing program 1: epoll_create(0xffff) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async, rerun: 32) epoll_pwait(r0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0xfffffffd, &(0x7f0000000140), 0x8) (rerun: 32) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x48, 0xfffffffffffffffe) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:47 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000100)={r0, &(0x7f0000000080)=""/83}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000002c0)={r1, 0xa, &(0x7f00000001c0)=[0x9, 0x8, 0x101, 0x0, 0x40, 0x4, 0xff, 0x8001, 0x0, 0x8], &(0x7f0000000200)=[0xfffffffd], 0x83355a0791e04299, 0x3, 0x40, &(0x7f0000000240)=[0xa692, 0x3, 0x4d8], &(0x7f0000000280)=[0xba1]}) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 05:56:47 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) 05:56:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x1, 0x200}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x401, 0x200002) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x6) 05:56:47 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) (async) 05:56:47 executing program 1: epoll_create(0xffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0xfffffffd, &(0x7f0000000140), 0x8) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x48, 0xfffffffffffffffe) epoll_create(0xffff) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) epoll_pwait(r0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0xfffffffd, &(0x7f0000000140), 0x8) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x48, 0xfffffffffffffffe) (async) 05:56:47 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000100)={r0, &(0x7f0000000080)=""/83}) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{}, {0x0}, {}, {}]}) (rerun: 32) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000002c0)={r1, 0xa, &(0x7f00000001c0)=[0x9, 0x8, 0x101, 0x0, 0x40, 0x4, 0xff, 0x8001, 0x0, 0x8], &(0x7f0000000200)=[0xfffffffd], 0x83355a0791e04299, 0x3, 0x40, &(0x7f0000000240)=[0xa692, 0x3, 0x4d8], &(0x7f0000000280)=[0xba1]}) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 05:56:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xb3ce, r1}) r3 = socket(0x29, 0x80000, 0x2) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x2, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000240)={0xfffffffffffffffd, r5}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x401, 0x200002) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x401, 0x200002) (async) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x6) (async) 05:56:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:47 executing program 5: r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil}) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000900000000009a898a5786df99222de882ccedca51383f47cdff1bc1b3f83acd31a879e73229e7330f31e849c8c5a1af5f181bef5f090184fc0342177900000000000000", @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYBLOB="020000a0010000000000006000010000d66a4cdc1f0e81cc"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, 0x0, 0x0) r7 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r2, r6, 0x1}) 05:56:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xb3ce, r1}) r3 = socket(0x29, 0x80000, 0x2) (async) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x2, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000240)={0xfffffffffffffffd, r5}) (async) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) 05:56:47 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)={0x3}) 05:56:47 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x401, 0x200002) (async) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x6) 05:56:47 executing program 5: r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil}) (async) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000900000000009a898a5786df99222de882ccedca51383f47cdff1bc1b3f83acd31a879e73229e7330f31e849c8c5a1af5f181bef5f090184fc0342177900000000000000", @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYBLOB="020000a0010000000000006000010000d66a4cdc1f0e81cc"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) (async) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, 0x0, 0x0) (async) r7 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, 0xffffffffffffffff, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r7, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r2, r6, 0x1}) 05:56:47 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) 05:56:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xb3ce, r1}) r3 = socket(0x29, 0x80000, 0x2) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x2, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000240)={0xfffffffffffffffd, r5}) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xb3ce, r1}) (async) socket(0x29, 0x80000, 0x2) (async) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x2, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000240)={0xfffffffffffffffd, r5}) (async) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) 05:56:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={r3, 0x1}) 05:56:47 executing program 2: clock_gettime(0x0, &(0x7f00000059c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/153, 0x99}], 0xa, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/41, 0x29}, {&(0x7f0000000900)=""/217, 0xd9}], 0x2, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/168, 0xa8}, {&(0x7f0000001bc0)=""/223, 0xdf}, {&(0x7f0000001cc0)=""/214, 0xd6}, {&(0x7f0000001dc0)=""/93, 0x5d}, {&(0x7f0000001e40)=""/99, 0x63}], 0x6, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/107, 0x6b}, {&(0x7f0000002140)=""/32, 0x20}, {&(0x7f0000002180)=""/91, 0x5b}, {&(0x7f0000002200)=""/101, 0x65}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/148, 0x94}, {&(0x7f00000025c0)=""/103, 0x67}, {&(0x7f0000002640)=""/140, 0x8c}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x5, &(0x7f0000003780)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003800), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003880)=""/71, 0x47}, {&(0x7f0000003900)=""/186, 0xba}], 0x2}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003d40)=[{&(0x7f0000005b00)=""/90, 0x5a}, {&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/40, 0x28}, {&(0x7f0000003c40)=""/208, 0xd0}], 0x4, &(0x7f0000003d80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003e00)=""/131, 0x83}, {&(0x7f0000003ec0)=""/237, 0xed}], 0x2, &(0x7f0000004000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000005600)=[{&(0x7f0000004180)=""/165, 0xa5}, {&(0x7f0000004240)=""/173, 0xad}, {&(0x7f0000004300)=""/5, 0x5}, {&(0x7f0000004340)=""/243, 0xf3}, {&(0x7f0000004440)=""/38, 0x26}, {&(0x7f0000004480)=""/203, 0xcb}, {&(0x7f0000004580)=""/108, 0x6c}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x8, &(0x7f0000005680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x9, 0x40000000, &(0x7f0000005a00)={r0, r1+60000000}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000005a40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000005ac0)={&(0x7f0000005a80)=[r4], 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000003a80), 0x4) 05:56:47 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)={0x3}) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)={0x3}) (async) 05:56:47 executing program 5: r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil}) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000900000000009a898a5786df99222de882ccedca51383f47cdff1bc1b3f83acd31a879e73229e7330f31e849c8c5a1af5f181bef5f090184fc0342177900000000000000", @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYBLOB="020000a0010000000000006000010000d66a4cdc1f0e81cc"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, 0x0, 0x0) r7 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r2, r6, 0x1}) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x12) (async) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r3, 0x0, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000900000000009a898a5786df99222de882ccedca51383f47cdff1bc1b3f83acd31a879e73229e7330f31e849c8c5a1af5f181bef5f090184fc0342177900000000000000", @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYBLOB="020000a0010000000000006000010000d66a4cdc1f0e81cc"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) (async) getpgid(0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r5, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r6, 0x0, 0x0) (async) getpgid(0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, 0xffffffffffffffff, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r7, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r2, r6, 0x1}) (async) 05:56:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200102) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={r3, 0x1}) 05:56:47 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:47 executing program 2: clock_gettime(0x0, &(0x7f00000059c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/153, 0x99}], 0xa, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/41, 0x29}, {&(0x7f0000000900)=""/217, 0xd9}], 0x2, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/168, 0xa8}, {&(0x7f0000001bc0)=""/223, 0xdf}, {&(0x7f0000001cc0)=""/214, 0xd6}, {&(0x7f0000001dc0)=""/93, 0x5d}, {&(0x7f0000001e40)=""/99, 0x63}], 0x6, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/107, 0x6b}, {&(0x7f0000002140)=""/32, 0x20}, {&(0x7f0000002180)=""/91, 0x5b}, {&(0x7f0000002200)=""/101, 0x65}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/148, 0x94}, {&(0x7f00000025c0)=""/103, 0x67}, {&(0x7f0000002640)=""/140, 0x8c}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x5, &(0x7f0000003780)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003800), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003880)=""/71, 0x47}, {&(0x7f0000003900)=""/186, 0xba}], 0x2}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003d40)=[{&(0x7f0000005b00)=""/90, 0x5a}, {&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/40, 0x28}, {&(0x7f0000003c40)=""/208, 0xd0}], 0x4, &(0x7f0000003d80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003e00)=""/131, 0x83}, {&(0x7f0000003ec0)=""/237, 0xed}], 0x2, &(0x7f0000004000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000005600)=[{&(0x7f0000004180)=""/165, 0xa5}, {&(0x7f0000004240)=""/173, 0xad}, {&(0x7f0000004300)=""/5, 0x5}, {&(0x7f0000004340)=""/243, 0xf3}, {&(0x7f0000004440)=""/38, 0x26}, {&(0x7f0000004480)=""/203, 0xcb}, {&(0x7f0000004580)=""/108, 0x6c}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x8, &(0x7f0000005680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x9, 0x40000000, &(0x7f0000005a00)={r0, r1+60000000}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000005a40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000005ac0)={&(0x7f0000005a80)=[r4], 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000003a80), 0x4) clock_gettime(0x0, &(0x7f00000059c0)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/153, 0x99}], 0xa, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/41, 0x29}, {&(0x7f0000000900)=""/217, 0xd9}], 0x2, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/168, 0xa8}, {&(0x7f0000001bc0)=""/223, 0xdf}, {&(0x7f0000001cc0)=""/214, 0xd6}, {&(0x7f0000001dc0)=""/93, 0x5d}, {&(0x7f0000001e40)=""/99, 0x63}], 0x6, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/107, 0x6b}, {&(0x7f0000002140)=""/32, 0x20}, {&(0x7f0000002180)=""/91, 0x5b}, {&(0x7f0000002200)=""/101, 0x65}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/148, 0x94}, {&(0x7f00000025c0)=""/103, 0x67}, {&(0x7f0000002640)=""/140, 0x8c}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x5, &(0x7f0000003780)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003800), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003880)=""/71, 0x47}, {&(0x7f0000003900)=""/186, 0xba}], 0x2}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003d40)=[{&(0x7f0000005b00)=""/90, 0x5a}, {&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/40, 0x28}, {&(0x7f0000003c40)=""/208, 0xd0}], 0x4, &(0x7f0000003d80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003e00)=""/131, 0x83}, {&(0x7f0000003ec0)=""/237, 0xed}], 0x2, &(0x7f0000004000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000005600)=[{&(0x7f0000004180)=""/165, 0xa5}, {&(0x7f0000004240)=""/173, 0xad}, {&(0x7f0000004300)=""/5, 0x5}, {&(0x7f0000004340)=""/243, 0xf3}, {&(0x7f0000004440)=""/38, 0x26}, {&(0x7f0000004480)=""/203, 0xcb}, {&(0x7f0000004580)=""/108, 0x6c}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x8, &(0x7f0000005680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x9, 0x40000000, &(0x7f0000005a00)={r0, r1+60000000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000005a40)) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000005ac0)={&(0x7f0000005a80)=[r4], 0x1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)) (async) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000003a80), 0x4) (async) 05:56:47 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)={0x3}) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)={0x3}) (async) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={r3, 0x1}) 05:56:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200102) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200102) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) (async) 05:56:47 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) 05:56:47 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 05:56:47 executing program 2: clock_gettime(0x0, &(0x7f00000059c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/153, 0x99}], 0xa, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/41, 0x29}, {&(0x7f0000000900)=""/217, 0xd9}], 0x2, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/168, 0xa8}, {&(0x7f0000001bc0)=""/223, 0xdf}, {&(0x7f0000001cc0)=""/214, 0xd6}, {&(0x7f0000001dc0)=""/93, 0x5d}, {&(0x7f0000001e40)=""/99, 0x63}], 0x6, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/107, 0x6b}, {&(0x7f0000002140)=""/32, 0x20}, {&(0x7f0000002180)=""/91, 0x5b}, {&(0x7f0000002200)=""/101, 0x65}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/148, 0x94}, {&(0x7f00000025c0)=""/103, 0x67}, {&(0x7f0000002640)=""/140, 0x8c}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x5, &(0x7f0000003780)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003800), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003880)=""/71, 0x47}, {&(0x7f0000003900)=""/186, 0xba}], 0x2}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003d40)=[{&(0x7f0000005b00)=""/90, 0x5a}, {&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/40, 0x28}, {&(0x7f0000003c40)=""/208, 0xd0}], 0x4, &(0x7f0000003d80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003e00)=""/131, 0x83}, {&(0x7f0000003ec0)=""/237, 0xed}], 0x2, &(0x7f0000004000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000005600)=[{&(0x7f0000004180)=""/165, 0xa5}, {&(0x7f0000004240)=""/173, 0xad}, {&(0x7f0000004300)=""/5, 0x5}, {&(0x7f0000004340)=""/243, 0xf3}, {&(0x7f0000004440)=""/38, 0x26}, {&(0x7f0000004480)=""/203, 0xcb}, {&(0x7f0000004580)=""/108, 0x6c}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x8, &(0x7f0000005680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x9, 0x40000000, &(0x7f0000005a00)={r0, r1+60000000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000005a40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000005ac0)={&(0x7f0000005a80)=[r4], 0x1}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)) (async, rerun: 32) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000003a80), 0x4) (rerun: 32) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:47 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 64) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) (rerun: 64) 05:56:47 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 05:56:47 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000080)=""/245, 0xf5, 0x2001, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0xf5a68294115ddac0) r4 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) recvmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1, &(0x7f0000000380)=""/54, 0x36}, 0x40000000) shmat(r4, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:47 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) shmdt(r0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 05:56:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200102) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (rerun: 64) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) 05:56:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7, 0x9, &(0x7f0000000080)=[0x8, 0x200, 0x8, 0x9, 0x1, 0x551d, 0x5, 0x1, 0x6], &(0x7f00000000c0)=[0x7ff], &(0x7f0000000100)=[0x9, 0x3, 0x0, 0x8]}) 05:56:47 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) (async) 05:56:47 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) recvfrom$unix(r2, &(0x7f0000000080)=""/245, 0xf5, 0x2001, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0xf5a68294115ddac0) (async) r4 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) (async) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) recvmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1, &(0x7f0000000380)=""/54, 0x36}, 0x40000000) (async) shmat(r4, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 05:56:47 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7, 0x9, &(0x7f0000000080)=[0x8, 0x200, 0x8, 0x9, 0x1, 0x551d, 0x5, 0x1, 0x6], &(0x7f00000000c0)=[0x7ff], &(0x7f0000000100)=[0x9, 0x3, 0x0, 0x8]}) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) 05:56:48 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)=""/126, 0x7e}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/225, 0xe1}], 0x5, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x2, 0x10003, &(0x7f0000000900)={0x77359400}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000940)={0x0, 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xbe0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)) 05:56:48 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000080)=""/245, 0xf5, 0x2001, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0xf5a68294115ddac0) r4 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) recvmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1, &(0x7f0000000380)=""/54, 0x36}, 0x40000000) shmat(r4, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) recvfrom$unix(r2, &(0x7f0000000080)=""/245, 0xf5, 0x2001, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) (async) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0xf5a68294115ddac0) (async) shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) (async) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async) recvmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1, &(0x7f0000000380)=""/54, 0x36}, 0x40000000) (async) shmat(r4, &(0x7f0000ffa000/0x4000)=nil, 0x2000) (async) 05:56:48 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x7, 0x9, &(0x7f0000000080)=[0x8, 0x200, 0x8, 0x9, 0x1, 0x551d, 0x5, 0x1, 0x6], &(0x7f00000000c0)=[0x7ff], &(0x7f0000000100)=[0x9, 0x3, 0x0, 0x8]}) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x101}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x1, 0x4}) 05:56:48 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)=""/126, 0x7e}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/225, 0xe1}], 0x5, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x2, 0x10003, &(0x7f0000000900)={0x77359400}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000940)={0x0, 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xbe0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)=""/126, 0x7e}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/225, 0xe1}], 0x5, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x2, 0x10003, &(0x7f0000000900)={0x77359400}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000940)) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r2, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xbe0}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)) (async) 05:56:48 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 05:56:48 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) (async) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f00000000c0)=[r1, 0x0], &(0x7f0000000240)=[0x0, 0x0, r2], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 1', 0x14) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:48 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x101}) (rerun: 64) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x1, 0x4}) 05:56:48 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 05:56:48 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)=""/126, 0x7e}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/225, 0xe1}], 0x5, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x2, 0x10003, &(0x7f0000000900)={0x77359400}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000940)={0x0, 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xbe0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 05:56:48 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) (async) 05:56:48 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x2}) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) (async) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x101}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x1, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x101}) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x1, 0x4}) (async) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f00000000c0)=[r1, 0x0], &(0x7f0000000240)=[0x0, 0x0, r2], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 1', 0x14) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:48 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async) 05:56:48 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) [ 1904.644188] Unknown ioctl -1071619020 05:56:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x2}) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0xc7, 0x6, 0x0, "e963ba37f3ced9fdc0fff46a4253360d57b3dcb60ccd4e14dbebf218a65cbe7966d11981b0ae97cc8c8f6e31e7e7136f309f2ae46b027d565102d84dd9b58bcefc2900fe7c69f0bb90664d542a8207e14cd3371c7575da200b16812a62b4cdd227203a786897396425ca8e834b8f24a363e15696441a52c03d9102689c5711cc51127c422abac2bf0028eefb474ce4e2c0e3647ee1d059927777ddd2ca828c3baf93b26ec4b973f8b63fdadb0d3e8e66cd33b8574aae5d36720052dd88627aa1451d02afaf3b27"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1ff, 0x1, 0xffff}) 05:56:48 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f00000000c0)=[r1, 0x0], &(0x7f0000000240)=[0x0, 0x0, r2], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 1', 0x14) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f00000000c0)=[r1, 0x0], &(0x7f0000000240)=[0x0, 0x0, r2], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 1', 0x14) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:48 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000) (async) 05:56:48 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 05:56:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x2}) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x12) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) [ 1904.754154] Unknown ioctl -1071619020 05:56:48 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000) (async) 05:56:48 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0xc7, 0x6, 0x0, "e963ba37f3ced9fdc0fff46a4253360d57b3dcb60ccd4e14dbebf218a65cbe7966d11981b0ae97cc8c8f6e31e7e7136f309f2ae46b027d565102d84dd9b58bcefc2900fe7c69f0bb90664d542a8207e14cd3371c7575da200b16812a62b4cdd227203a786897396425ca8e834b8f24a363e15696441a52c03d9102689c5711cc51127c422abac2bf0028eefb474ce4e2c0e3647ee1d059927777ddd2ca828c3baf93b26ec4b973f8b63fdadb0d3e8e66cd33b8574aae5d36720052dd88627aa1451d02afaf3b27"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1ff, 0x1, 0xffff}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) shmdt(r0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0xc7, 0x6, 0x0, "e963ba37f3ced9fdc0fff46a4253360d57b3dcb60ccd4e14dbebf218a65cbe7966d11981b0ae97cc8c8f6e31e7e7136f309f2ae46b027d565102d84dd9b58bcefc2900fe7c69f0bb90664d542a8207e14cd3371c7575da200b16812a62b4cdd227203a786897396425ca8e834b8f24a363e15696441a52c03d9102689c5711cc51127c422abac2bf0028eefb474ce4e2c0e3647ee1d059927777ddd2ca828c3baf93b26ec4b973f8b63fdadb0d3e8e66cd33b8574aae5d36720052dd88627aa1451d02afaf3b27"}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1ff, 0x1, 0xffff}) (async) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x12) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/245, 0xf5}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/211, 0xd3}], 0x6, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x20) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000007c0)={0x3}) 05:56:48 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) [ 1904.841279] Unknown ioctl -1071619020 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/245, 0xf5}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/211, 0xd3}], 0x6, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x20) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000007c0)={0x3}) 05:56:48 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r0) (async) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r0) (async, rerun: 64) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0xc7, 0x6, 0x0, "e963ba37f3ced9fdc0fff46a4253360d57b3dcb60ccd4e14dbebf218a65cbe7966d11981b0ae97cc8c8f6e31e7e7136f309f2ae46b027d565102d84dd9b58bcefc2900fe7c69f0bb90664d542a8207e14cd3371c7575da200b16812a62b4cdd227203a786897396425ca8e834b8f24a363e15696441a52c03d9102689c5711cc51127c422abac2bf0028eefb474ce4e2c0e3647ee1d059927777ddd2ca828c3baf93b26ec4b973f8b63fdadb0d3e8e66cd33b8574aae5d36720052dd88627aa1451d02afaf3b27"}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1ff, 0x1, 0xffff}) 05:56:48 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r0) (async) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20c003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101900) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil}) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/245, 0xf5}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/211, 0xd3}], 0x6, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x20) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000007c0)={0x3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/245, 0xf5}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/211, 0xd3}], 0x6, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x20) (async) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000007c0)={0x3}) (async) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20c003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101900) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil}) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20c003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080), 0x4) 05:56:48 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101900) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil}) (async, rerun: 64) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) (rerun: 64) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x121002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async, rerun: 32) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080), 0x4) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x121002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:48 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x28000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1b7731f91a09b2f7e5f3199ff223edf23379bb0db80387c722db692c1558028d8117d6c8c1d82aaf28fc337f1ae70727c82b1ffa4f20e3ef18a82d00c0a7b8f3f1fc8a2d63e624dc60736d0913be3027371e50d9e41d0213d8f77beb962e3f1de77470ec8f86", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250200000008000600ac141437060001004e200000050004000500000008000600ac1414bb050003005c000000060001004e220000050003008700000005000400030000000500040002000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x44014) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x50}, 0x1, 0x0, 0x0, 0x10090}, 0x8010) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x121002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x121002) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:48 executing program 5: shmget(0x2, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x5000) r1 = shmat(0x0, &(0x7f0000f41000/0x4000)=nil, 0x1000) shmdt(r1) shmdt(r1) 05:56:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080), 0x4) 05:56:48 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x28000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1b7731f91a09b2f7e5f3199ff223edf23379bb0db80387c722db692c1558028d8117d6c8c1d82aaf28fc337f1ae70727c82b1ffa4f20e3ef18a82d00c0a7b8f3f1fc8a2d63e624dc60736d0913be3027371e50d9e41d0213d8f77beb962e3f1de77470ec8f86", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250200000008000600ac141437060001004e200000050004000500000008000600ac1414bb050003005c000000060001004e220000050003008700000005000400030000000500040002000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x44014) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x50}, 0x1, 0x0, 0x0, 0x10090}, 0x8010) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x28000) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1b7731f91a09b2f7e5f3199ff223edf23379bb0db80387c722db692c1558028d8117d6c8c1d82aaf28fc337f1ae70727c82b1ffa4f20e3ef18a82d00c0a7b8f3f1fc8a2d63e624dc60736d0913be3027371e50d9e41d0213d8f77beb962e3f1de77470ec8f86", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250200000008000600ac141437060001004e200000050004000500000008000600ac1414bb050003005c000000060001004e220000050003008700000005000400030000000500040002000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x44014) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x50}, 0x1, 0x0, 0x0, 0x10090}, 0x8010) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) 05:56:48 executing program 5: shmget(0x2, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x5000) r1 = shmat(0x0, &(0x7f0000f41000/0x4000)=nil, 0x1000) shmdt(r1) (async) shmdt(r1) 05:56:48 executing program 0: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x81) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/187, 0xbb}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/4096, 0x1000}], 0xa, &(0x7f0000003600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000003700)={0x0, 0x0, 0x10001}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000003740)=0x40) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:49 executing program 5: shmget(0x2, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x5000) r1 = shmat(0x0, &(0x7f0000f41000/0x4000)=nil, 0x1000) shmdt(r1) (async) shmdt(r1) 05:56:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f00000000c0)={[0x7]}, 0x8) 05:56:49 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006e40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0xa, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002940)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/10, 0xa}], 0x2}}, {{&(0x7f0000006bc0)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/126, 0x7e}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/64, 0x40}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/43, 0x2b}, {&(0x7f0000002b80)=""/249, 0xf9}], 0x6}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000002d00)=""/87, 0x57}, {&(0x7f0000002d80)=""/158, 0x9e}, {&(0x7f0000002e40)=""/97, 0x61}, {&(0x7f0000002ec0)=""/104, 0x68}, {&(0x7f0000002f40)=""/195, 0xc3}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000002980)=""/52, 0x34}], 0x8, &(0x7f0000005100)}}, {{&(0x7f0000005140), 0x6e, &(0x7f0000006500)=[{&(0x7f00000051c0)=""/48, 0x30}, {&(0x7f0000005200)=""/157, 0x9d}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/109, 0x6d}, {&(0x7f0000006340)=""/170, 0xaa}, {&(0x7f0000006400)=""/204, 0xcc}], 0x6, &(0x7f0000006580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000006640), 0x6e, &(0x7f00000066c0), 0x0, &(0x7f0000006700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000006740)=@abs, 0x6e, &(0x7f0000006b40)=[{&(0x7f00000067c0)=""/58, 0x3a}, {&(0x7f0000006800)=""/217, 0xd9}, {&(0x7f0000006900)=""/61, 0x3d}, {&(0x7f0000006940)=""/179, 0xb3}, {&(0x7f0000006a00)=""/63, 0x3f}, {&(0x7f0000006a40)=""/232, 0xe8}], 0x6, &(0x7f0000007100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000c7681fbde187b4119ab19e9308862989ee1e7b543fde99a75f77ae932a872d932c28da4c9780da8e9a05c3306ac6f8494a96439838c6987cc849e549014016bb5af088ead77f0b9c18970f195a816b0ec4df13ce86c0535b3f0183bd1aab28e257b3575b59b4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="8d6022d51585440be9f3f115b664cff353df39ab543b2773c01ce90e4b87d8684b804f2c7b3a91c21eb5b50b34e41f949b9bd8c83232a5769b474a8d41d1"], 0x48}}, {{&(0x7f0000006c40)=@abs, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006cc0)=""/99, 0x63}, {&(0x7f0000006d40)=""/31, 0x1f}, {&(0x7f0000006d80)=""/14, 0xe}], 0x3, &(0x7f0000006e00)}}], 0x8, 0x40000040, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000009080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000009140)={'ip6tnl0\x00', &(0x7f00000090c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0x3f, 0x1b, @remote, @remote, 0x8000, 0x10, 0x5, 0x8}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000009180), &(0x7f00000091c0)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000009200)={'wg2\x00', 0x0}) getsockname(r4, &(0x7f0000009440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000094c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000009500)={'team0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000009540)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000009640)=0xe8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000009680)=0x0, &(0x7f00000096c0)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f000000a740)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000a700)={&(0x7f0000009700)={0xff0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6bde, 0x43, 0x3, 0xfffffff8}, {0xfff, 0x3, 0x3f, 0x2}, {0x7fff, 0x5, 0x9, 0xd4}, {0x400, 0x57, 0x1f, 0x10000}, {0x4, 0x7, 0x1f, 0xffffffff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47d3}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b43}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x25a0a35}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x250, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x5, 0x7, 0xf2cb}, {0x0, 0xf4, 0x5, 0x6}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0xff0}, 0x1, 0x0, 0x0, 0x1e78050b7c624996}, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:49 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES64, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000002c0)=0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB="1ae9c8b4f879aa026f27432e9fdae0200af33125f6a2499bbf342263673c50de76c412cef5", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="dc01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000008038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="e80102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000010000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2402028074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040004000507fc000000ff03ffff0080000005001f06c60700000600061f3b0f00004906030116000000450e0189b60b00000008010007000000030020f2040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffff000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000080000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010100003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000001000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="1c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400e200000008000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400050004fa850e0000050008010300000002000a090200000008000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400d807000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002008081ee0000000200fc080a0500003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000002000"], 0xab0}, 0x1, 0x0, 0x0, 0x44000}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x4) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000140)={0x6, 0x9, &(0x7f0000000080)=[0x9, 0x4, 0x6, 0x7, 0x3, 0x0, 0x9, 0x7, 0x20], &(0x7f00000000c0), &(0x7f0000000100)=[0x8, 0x7ff, 0x1]}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x8500) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000001c0)={0xfb, 0x7, 0x3}) 05:56:49 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x28000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1b7731f91a09b2f7e5f3199ff223edf23379bb0db80387c722db692c1558028d8117d6c8c1d82aaf28fc337f1ae70727c82b1ffa4f20e3ef18a82d00c0a7b8f3f1fc8a2d63e624dc60736d0913be3027371e50d9e41d0213d8f77beb962e3f1de77470ec8f86", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250200000008000600ac141437060001004e200000050004000500000008000600ac1414bb050003005c000000060001004e220000050003008700000005000400030000000500040002000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x44014) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x50}, 0x1, 0x0, 0x0, 0x10090}, 0x8010) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x28000) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1b7731f91a09b2f7e5f3199ff223edf23379bb0db80387c722db692c1558028d8117d6c8c1d82aaf28fc337f1ae70727c82b1ffa4f20e3ef18a82d00c0a7b8f3f1fc8a2d63e624dc60736d0913be3027371e50d9e41d0213d8f77beb962e3f1de77470ec8f86", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250200000008000600ac141437060001004e200000050004000500000008000600ac1414bb050003005c000000060001004e220000050003008700000005000400030000000500040002000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x44014) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x50}, 0x1, 0x0, 0x0, 0x10090}, 0x8010) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) 05:56:49 executing program 0: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x81) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/187, 0xbb}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/4096, 0x1000}], 0xa, &(0x7f0000003600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000003700)={0x0, 0x0, 0x10001}) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000003740)=0x40) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:49 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f00000000c0)={[0x7]}, 0x8) 05:56:49 executing program 0: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x81) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/187, 0xbb}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/4096, 0x1000}], 0xa, &(0x7f0000003600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000003700)={0x0, 0x0, 0x10001}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000003740)=0x40) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x81) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/187, 0xbb}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/4096, 0x1000}], 0xa, &(0x7f0000003600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x2) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000003700)={0x0, 0x0, 0x10001}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000003740)=0x40) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:49 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006e40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0xa, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002940)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/10, 0xa}], 0x2}}, {{&(0x7f0000006bc0)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/126, 0x7e}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/64, 0x40}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/43, 0x2b}, {&(0x7f0000002b80)=""/249, 0xf9}], 0x6}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000002d00)=""/87, 0x57}, {&(0x7f0000002d80)=""/158, 0x9e}, {&(0x7f0000002e40)=""/97, 0x61}, {&(0x7f0000002ec0)=""/104, 0x68}, {&(0x7f0000002f40)=""/195, 0xc3}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000002980)=""/52, 0x34}], 0x8, &(0x7f0000005100)}}, {{&(0x7f0000005140), 0x6e, &(0x7f0000006500)=[{&(0x7f00000051c0)=""/48, 0x30}, {&(0x7f0000005200)=""/157, 0x9d}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/109, 0x6d}, {&(0x7f0000006340)=""/170, 0xaa}, {&(0x7f0000006400)=""/204, 0xcc}], 0x6, &(0x7f0000006580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000006640), 0x6e, &(0x7f00000066c0), 0x0, &(0x7f0000006700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000006740)=@abs, 0x6e, &(0x7f0000006b40)=[{&(0x7f00000067c0)=""/58, 0x3a}, {&(0x7f0000006800)=""/217, 0xd9}, {&(0x7f0000006900)=""/61, 0x3d}, {&(0x7f0000006940)=""/179, 0xb3}, {&(0x7f0000006a00)=""/63, 0x3f}, {&(0x7f0000006a40)=""/232, 0xe8}], 0x6, &(0x7f0000007100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000c7681fbde187b4119ab19e9308862989ee1e7b543fde99a75f77ae932a872d932c28da4c9780da8e9a05c3306ac6f8494a96439838c6987cc849e549014016bb5af088ead77f0b9c18970f195a816b0ec4df13ce86c0535b3f0183bd1aab28e257b3575b59b4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="8d6022d51585440be9f3f115b664cff353df39ab543b2773c01ce90e4b87d8684b804f2c7b3a91c21eb5b50b34e41f949b9bd8c83232a5769b474a8d41d1"], 0x48}}, {{&(0x7f0000006c40)=@abs, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006cc0)=""/99, 0x63}, {&(0x7f0000006d40)=""/31, 0x1f}, {&(0x7f0000006d80)=""/14, 0xe}], 0x3, &(0x7f0000006e00)}}], 0x8, 0x40000040, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000009080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000009140)={'ip6tnl0\x00', &(0x7f00000090c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0x3f, 0x1b, @remote, @remote, 0x8000, 0x10, 0x5, 0x8}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000009180), &(0x7f00000091c0)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000009200)={'wg2\x00', 0x0}) getsockname(r4, &(0x7f0000009440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000094c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000009500)={'team0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000009540)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000009640)=0xe8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000009680)=0x0, &(0x7f00000096c0)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f000000a740)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000a700)={&(0x7f0000009700)={0xff0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6bde, 0x43, 0x3, 0xfffffff8}, {0xfff, 0x3, 0x3f, 0x2}, {0x7fff, 0x5, 0x9, 0xd4}, {0x400, 0x57, 0x1f, 0x10000}, {0x4, 0x7, 0x1f, 0xffffffff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47d3}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b43}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x25a0a35}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x250, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x5, 0x7, 0xf2cb}, {0x0, 0xf4, 0x5, 0x6}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0xff0}, 0x1, 0x0, 0x0, 0x1e78050b7c624996}, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006e40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0xa, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002940)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/10, 0xa}], 0x2}}, {{&(0x7f0000006bc0)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/126, 0x7e}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/64, 0x40}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/43, 0x2b}, {&(0x7f0000002b80)=""/249, 0xf9}], 0x6}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000002d00)=""/87, 0x57}, {&(0x7f0000002d80)=""/158, 0x9e}, {&(0x7f0000002e40)=""/97, 0x61}, {&(0x7f0000002ec0)=""/104, 0x68}, {&(0x7f0000002f40)=""/195, 0xc3}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000002980)=""/52, 0x34}], 0x8, &(0x7f0000005100)}}, {{&(0x7f0000005140), 0x6e, &(0x7f0000006500)=[{&(0x7f00000051c0)=""/48, 0x30}, {&(0x7f0000005200)=""/157, 0x9d}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/109, 0x6d}, {&(0x7f0000006340)=""/170, 0xaa}, {&(0x7f0000006400)=""/204, 0xcc}], 0x6, &(0x7f0000006580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000006640), 0x6e, &(0x7f00000066c0), 0x0, &(0x7f0000006700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000006740)=@abs, 0x6e, &(0x7f0000006b40)=[{&(0x7f00000067c0)=""/58, 0x3a}, {&(0x7f0000006800)=""/217, 0xd9}, {&(0x7f0000006900)=""/61, 0x3d}, {&(0x7f0000006940)=""/179, 0xb3}, {&(0x7f0000006a00)=""/63, 0x3f}, {&(0x7f0000006a40)=""/232, 0xe8}], 0x6, &(0x7f0000007100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000c7681fbde187b4119ab19e9308862989ee1e7b543fde99a75f77ae932a872d932c28da4c9780da8e9a05c3306ac6f8494a96439838c6987cc849e549014016bb5af088ead77f0b9c18970f195a816b0ec4df13ce86c0535b3f0183bd1aab28e257b3575b59b4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="8d6022d51585440be9f3f115b664cff353df39ab543b2773c01ce90e4b87d8684b804f2c7b3a91c21eb5b50b34e41f949b9bd8c83232a5769b474a8d41d1"], 0x48}}, {{&(0x7f0000006c40)=@abs, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006cc0)=""/99, 0x63}, {&(0x7f0000006d40)=""/31, 0x1f}, {&(0x7f0000006d80)=""/14, 0xe}], 0x3, &(0x7f0000006e00)}}], 0x8, 0x40000040, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000009080)) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000009140)={'ip6tnl0\x00', &(0x7f00000090c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0x3f, 0x1b, @remote, @remote, 0x8000, 0x10, 0x5, 0x8}}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000009180), &(0x7f00000091c0)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[], 0x208}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000009200)={'wg2\x00'}) (async) getsockname(r4, &(0x7f0000009440)=@xdp, &(0x7f00000094c0)=0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000009500)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000009540)={{{@in=@local}}, {{}, 0x0, @in6}}, &(0x7f0000009640)=0xe8) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000009680), &(0x7f00000096c0)=0x4) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f000000a740)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000a700)={&(0x7f0000009700)={0xff0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6bde, 0x43, 0x3, 0xfffffff8}, {0xfff, 0x3, 0x3f, 0x2}, {0x7fff, 0x5, 0x9, 0xd4}, {0x400, 0x57, 0x1f, 0x10000}, {0x4, 0x7, 0x1f, 0xffffffff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47d3}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b43}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x25a0a35}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x250, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x5, 0x7, 0xf2cb}, {0x0, 0xf4, 0x5, 0x6}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0xff0}, 0x1, 0x0, 0x0, 0x1e78050b7c624996}, 0x0) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:49 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xe0c00) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f00000000c0)={[0x7]}, 0x8) [ 1905.439284] nla_parse: 63 callbacks suppressed [ 1905.439290] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. 05:56:49 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:49 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES64, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000002c0)=0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB="1ae9c8b4f879aa026f27432e9fdae0200af33125f6a2499bbf342263673c50de76c412cef5", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="dc01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000008038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="e80102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000010000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2402028074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040004000507fc000000ff03ffff0080000005001f06c60700000600061f3b0f00004906030116000000450e0189b60b00000008010007000000030020f2040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffff000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000080000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010100003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000001000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="1c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400e200000008000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400050004fa850e0000050008010300000002000a090200000008000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400d807000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002008081ee0000000200fc080a0500003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000002000"], 0xab0}, 0x1, 0x0, 0x0, 0x44000}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x4) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000140)={0x6, 0x9, &(0x7f0000000080)=[0x9, 0x4, 0x6, 0x7, 0x3, 0x0, 0x9, 0x7, 0x20], &(0x7f00000000c0), &(0x7f0000000100)=[0x8, 0x7ff, 0x1]}) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x8500) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000001c0)={0xfb, 0x7, 0x3}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES64, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000002c0)=0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x4) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB="1ae9c8b4f879aa026f27432e9fdae0200af33125f6a2499bbf342263673c50de76c412cef5", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="dc01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000008038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="e80102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000010000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2402028074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040004000507fc000000ff03ffff0080000005001f06c60700000600061f3b0f00004906030116000000450e0189b60b00000008010007000000030020f2040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffff000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000080000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010100003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000001000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="1c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400e200000008000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400050004fa850e0000050008010300000002000a090200000008000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400d807000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002008081ee0000000200fc080a0500003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000002000"], 0xab0}, 0x1, 0x0, 0x0, 0x44000}, 0x10) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x4) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000140)={0x6, 0x9, &(0x7f0000000080)=[0x9, 0x4, 0x6, 0x7, 0x3, 0x0, 0x9, 0x7, 0x20], &(0x7f00000000c0), &(0x7f0000000100)=[0x8, 0x7ff, 0x1]}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x8500) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000001c0)={0xfb, 0x7, 0x3}) (async) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x53f}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil}) 05:56:49 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1905.565528] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. 05:56:49 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006e40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0xa, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002940)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/10, 0xa}], 0x2}}, {{&(0x7f0000006bc0)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/126, 0x7e}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/64, 0x40}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/43, 0x2b}, {&(0x7f0000002b80)=""/249, 0xf9}], 0x6}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000002d00)=""/87, 0x57}, {&(0x7f0000002d80)=""/158, 0x9e}, {&(0x7f0000002e40)=""/97, 0x61}, {&(0x7f0000002ec0)=""/104, 0x68}, {&(0x7f0000002f40)=""/195, 0xc3}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000002980)=""/52, 0x34}], 0x8, &(0x7f0000005100)}}, {{&(0x7f0000005140), 0x6e, &(0x7f0000006500)=[{&(0x7f00000051c0)=""/48, 0x30}, {&(0x7f0000005200)=""/157, 0x9d}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/109, 0x6d}, {&(0x7f0000006340)=""/170, 0xaa}, {&(0x7f0000006400)=""/204, 0xcc}], 0x6, &(0x7f0000006580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000006640), 0x6e, &(0x7f00000066c0), 0x0, &(0x7f0000006700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000006740)=@abs, 0x6e, &(0x7f0000006b40)=[{&(0x7f00000067c0)=""/58, 0x3a}, {&(0x7f0000006800)=""/217, 0xd9}, {&(0x7f0000006900)=""/61, 0x3d}, {&(0x7f0000006940)=""/179, 0xb3}, {&(0x7f0000006a00)=""/63, 0x3f}, {&(0x7f0000006a40)=""/232, 0xe8}], 0x6, &(0x7f0000007100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000c7681fbde187b4119ab19e9308862989ee1e7b543fde99a75f77ae932a872d932c28da4c9780da8e9a05c3306ac6f8494a96439838c6987cc849e549014016bb5af088ead77f0b9c18970f195a816b0ec4df13ce86c0535b3f0183bd1aab28e257b3575b59b4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="8d6022d51585440be9f3f115b664cff353df39ab543b2773c01ce90e4b87d8684b804f2c7b3a91c21eb5b50b34e41f949b9bd8c83232a5769b474a8d41d1"], 0x48}}, {{&(0x7f0000006c40)=@abs, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006cc0)=""/99, 0x63}, {&(0x7f0000006d40)=""/31, 0x1f}, {&(0x7f0000006d80)=""/14, 0xe}], 0x3, &(0x7f0000006e00)}}], 0x8, 0x40000040, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000009080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000009140)={'ip6tnl0\x00', &(0x7f00000090c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0x3f, 0x1b, @remote, @remote, 0x8000, 0x10, 0x5, 0x8}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000009180), &(0x7f00000091c0)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000009200)={'wg2\x00', 0x0}) getsockname(r4, &(0x7f0000009440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000094c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000009500)={'team0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000009540)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000009640)=0xe8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000009680)=0x0, &(0x7f00000096c0)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f000000a740)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000a700)={&(0x7f0000009700)={0xff0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6bde, 0x43, 0x3, 0xfffffff8}, {0xfff, 0x3, 0x3f, 0x2}, {0x7fff, 0x5, 0x9, 0xd4}, {0x400, 0x57, 0x1f, 0x10000}, {0x4, 0x7, 0x1f, 0xffffffff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47d3}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b43}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x25a0a35}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x250, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x5, 0x7, 0xf2cb}, {0x0, 0xf4, 0x5, 0x6}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0xff0}, 0x1, 0x0, 0x0, 0x1e78050b7c624996}, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006e40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0xa, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002940)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/10, 0xa}], 0x2}}, {{&(0x7f0000006bc0)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/126, 0x7e}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/64, 0x40}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/43, 0x2b}, {&(0x7f0000002b80)=""/249, 0xf9}], 0x6}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000002d00)=""/87, 0x57}, {&(0x7f0000002d80)=""/158, 0x9e}, {&(0x7f0000002e40)=""/97, 0x61}, {&(0x7f0000002ec0)=""/104, 0x68}, {&(0x7f0000002f40)=""/195, 0xc3}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000002980)=""/52, 0x34}], 0x8, &(0x7f0000005100)}}, {{&(0x7f0000005140), 0x6e, &(0x7f0000006500)=[{&(0x7f00000051c0)=""/48, 0x30}, {&(0x7f0000005200)=""/157, 0x9d}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/109, 0x6d}, {&(0x7f0000006340)=""/170, 0xaa}, {&(0x7f0000006400)=""/204, 0xcc}], 0x6, &(0x7f0000006580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000006640), 0x6e, &(0x7f00000066c0), 0x0, &(0x7f0000006700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000006740)=@abs, 0x6e, &(0x7f0000006b40)=[{&(0x7f00000067c0)=""/58, 0x3a}, {&(0x7f0000006800)=""/217, 0xd9}, {&(0x7f0000006900)=""/61, 0x3d}, {&(0x7f0000006940)=""/179, 0xb3}, {&(0x7f0000006a00)=""/63, 0x3f}, {&(0x7f0000006a40)=""/232, 0xe8}], 0x6, &(0x7f0000007100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000c7681fbde187b4119ab19e9308862989ee1e7b543fde99a75f77ae932a872d932c28da4c9780da8e9a05c3306ac6f8494a96439838c6987cc849e549014016bb5af088ead77f0b9c18970f195a816b0ec4df13ce86c0535b3f0183bd1aab28e257b3575b59b4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="8d6022d51585440be9f3f115b664cff353df39ab543b2773c01ce90e4b87d8684b804f2c7b3a91c21eb5b50b34e41f949b9bd8c83232a5769b474a8d41d1"], 0x48}}, {{&(0x7f0000006c40)=@abs, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006cc0)=""/99, 0x63}, {&(0x7f0000006d40)=""/31, 0x1f}, {&(0x7f0000006d80)=""/14, 0xe}], 0x3, &(0x7f0000006e00)}}], 0x8, 0x40000040, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000009080)) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000009140)={'ip6tnl0\x00', &(0x7f00000090c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0x3f, 0x1b, @remote, @remote, 0x8000, 0x10, 0x5, 0x8}}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000009180), &(0x7f00000091c0)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[], 0x208}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000009200)={'wg2\x00'}) (async) getsockname(r4, &(0x7f0000009440)=@xdp, &(0x7f00000094c0)=0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000009500)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000009540)={{{@in=@local}}, {{}, 0x0, @in6}}, &(0x7f0000009640)=0xe8) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000009680), &(0x7f00000096c0)=0x4) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f000000a740)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000a700)={&(0x7f0000009700)={0xff0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6bde, 0x43, 0x3, 0xfffffff8}, {0xfff, 0x3, 0x3f, 0x2}, {0x7fff, 0x5, 0x9, 0xd4}, {0x400, 0x57, 0x1f, 0x10000}, {0x4, 0x7, 0x1f, 0xffffffff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47d3}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b43}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x25a0a35}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x250, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x5, 0x7, 0xf2cb}, {0x0, 0xf4, 0x5, 0x6}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0xff0}, 0x1, 0x0, 0x0, 0x1e78050b7c624996}, 0x0) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:49 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES64, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000002c0)=0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x4) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB="1ae9c8b4f879aa026f27432e9fdae0200af33125f6a2499bbf342263673c50de76c412cef5", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="dc01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000008038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="e80102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000010000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2402028074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040004000507fc000000ff03ffff0080000005001f06c60700000600061f3b0f00004906030116000000450e0189b60b00000008010007000000030020f2040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffff000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000080000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010100003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000001000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="1c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400e200000008000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400050004fa850e0000050008010300000002000a090200000008000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400d807000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002008081ee0000000200fc080a0500003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000002000"], 0xab0}, 0x1, 0x0, 0x0, 0x44000}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2}) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x4) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000140)={0x6, 0x9, &(0x7f0000000080)=[0x9, 0x4, 0x6, 0x7, 0x3, 0x0, 0x9, 0x7, 0x20], &(0x7f00000000c0), &(0x7f0000000100)=[0x8, 0x7ff, 0x1]}) (async) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x8500) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000001c0)={0xfb, 0x7, 0x3}) 05:56:49 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xe0c00) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil}) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x53f}) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil}) 05:56:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={0x0}}, 0xd7a2edb63254819) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c040000", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2504"], 0x48c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x186e4dad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3425b4a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe337}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1afdd72c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d9bf889}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="b1000010", @ANYRES16=0x0, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x801}, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x1b, 0x8, 0x10001, 0x0, @remote, @empty, 0x1, 0x7800, 0x4, 0x2b92}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x3bc, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x184, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55a6b241}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ee49af4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6426c96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74b4bd64}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14c32acc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d6b0a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c77cb6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4640ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26502d34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d42daea}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f18ef59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872e028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4771a6b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30ede324}]}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7de88125}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c4ddc3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6248e311}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50440ee6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34e6cd70}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4757ce21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26b7ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71e18a75}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616ee73f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13d214bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29f752ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61b3eba8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6583}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1689}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9767}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587c55be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdb1eca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be1d792}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53fe75ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb4e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe82}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c89cd3a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcda3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72591b92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x512dd4d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd797}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e565b75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c5f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5eeb66c7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d061b0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a9db885}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a772c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e4c9963}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x228e916a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69ef9ca0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x629c5e89}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b150bab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c9a0fa}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f460bf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x754592bd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52a077aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x20004045}, 0x20048010) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a8, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b35}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x745b7e8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e1a59c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45ec9300}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9608}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6140784f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x399718d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d9f10d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x592c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9144}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28d493d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc286cdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2758793a}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a7218a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x290a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7077}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x560000cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5449}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x278d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18821c6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79c9}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b027519}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5916f20d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5984104a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19653a38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaca7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cc9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0xa9a7c09131291199}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4008004}, 0xc095) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) socket$inet(0x2, 0x3, 0x2) [ 1905.669064] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. 05:56:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:49 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x2c000000, &(0x7f0000ffe000/0x2000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x1, 0x2010, r1, 0x82000000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000100)={0x1, 0x4, 0x5, 0x7fff, 0x100000000, 0x7, 0x7fffffff000, 0x5be, 0xf726, 0x3, 0x9, 0x2}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) r3 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x3000) 05:56:49 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 64) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xe0c00) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil}) (async, rerun: 64) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (rerun: 64) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x53f}) (async, rerun: 64) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil}) (rerun: 64) 05:56:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={0x0}}, 0xd7a2edb63254819) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c040000", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2504"], 0x48c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x186e4dad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3425b4a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe337}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1afdd72c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d9bf889}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="b1000010", @ANYRES16=0x0, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x801}, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x1b, 0x8, 0x10001, 0x0, @remote, @empty, 0x1, 0x7800, 0x4, 0x2b92}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x3bc, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x184, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55a6b241}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ee49af4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6426c96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74b4bd64}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14c32acc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d6b0a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c77cb6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4640ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26502d34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d42daea}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f18ef59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872e028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4771a6b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30ede324}]}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7de88125}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c4ddc3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6248e311}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50440ee6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34e6cd70}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4757ce21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26b7ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71e18a75}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616ee73f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13d214bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29f752ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61b3eba8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6583}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1689}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9767}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587c55be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdb1eca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be1d792}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53fe75ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb4e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe82}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c89cd3a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcda3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72591b92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x512dd4d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd797}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e565b75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c5f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5eeb66c7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d061b0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a9db885}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a772c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e4c9963}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x228e916a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69ef9ca0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x629c5e89}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b150bab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c9a0fa}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f460bf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x754592bd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52a077aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x20004045}, 0x20048010) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a8, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b35}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x745b7e8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e1a59c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45ec9300}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9608}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6140784f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x399718d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d9f10d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x592c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9144}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28d493d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc286cdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2758793a}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a7218a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x290a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7077}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x560000cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5449}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x278d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18821c6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79c9}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b027519}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5916f20d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5984104a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19653a38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaca7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cc9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0xa9a7c09131291199}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4008004}, 0xc095) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) socket$inet(0x2, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={0x0}}, 0xd7a2edb63254819) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r2) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c040000", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2504"], 0x48c}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x186e4dad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3425b4a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe337}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1afdd72c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d9bf889}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="b1000010", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf25030000000800010000000000080002000300000008000100000000005401088044000780080006002f0000000800050056532c5f08000500e766ac2608000600b5000000080006002e000000080006007500000008000500d43dd52f08000600d00000003c000780080005002d20ca0d080005009e2dec2208000500381d0e3a080006006b000000080006003b000000080006006400000008000600340000001c000780080006003e0000000800050094541b130800050039a449173c0007800800060065000000080005004595876008000500b569a377080006008200000008000600a400000008000500570d092008000600b00000000c000780080005006d8d875e240007800800050033fbb2110800050039df305308000500b69bc54208000600070000003400078008000600fd00000008000600df000000080005008dd43147080006008f000000080005001943156e08000600b70000001400078008000500c4b70b5d08000600bf000000080001000200000028010c8014000b8008000a00af37000008000a008b2400000c000b8008000a006dc0000034000b8008000a003341000008000900c686990508000900972e601208000a000100000008000a00fb09000008000900291c63710c000b8008000a00c196000034000b80080009005b72906f08000a005b3d000008000a00b3d5000008000a0050bc000008000a0009ef000008000900d41acc2b34000b8008000a0080b000000800090012984d5a08000a000e2c000008000a007ff200000800090046886b4308000a00a236000024000b8008000a0083a2000008000a005594000008000a00902b000008000a00fd2700001c000b8008000a0033260000080009006243fa4a08000a00d3d300001c000b800800090055a11d3008000a0054c5000008000a0048bb0000080001000100000008000200020000003c0008800c00078008000600fd0000000c00078008000500bf11ea791400078008000600660000000800050079a004290c000780080006005d000000"], 0x2fc}, 0x1, 0x0, 0x0, 0x801}, 0x84) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x1b, 0x8, 0x10001, 0x0, @remote, @empty, 0x1, 0x7800, 0x4, 0x2b92}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x3bc, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x184, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55a6b241}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ee49af4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6426c96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74b4bd64}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14c32acc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d6b0a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c77cb6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4640ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26502d34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d42daea}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f18ef59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872e028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4771a6b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30ede324}]}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7de88125}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c4ddc3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6248e311}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50440ee6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34e6cd70}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4757ce21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26b7ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71e18a75}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616ee73f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13d214bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29f752ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61b3eba8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6583}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1689}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9767}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587c55be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdb1eca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be1d792}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53fe75ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb4e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe82}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c89cd3a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcda3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72591b92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x512dd4d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd797}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e565b75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c5f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5eeb66c7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d061b0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a9db885}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a772c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e4c9963}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x228e916a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69ef9ca0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x629c5e89}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b150bab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c9a0fa}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f460bf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x754592bd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52a077aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x20004045}, 0x20048010) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), r5) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a8, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b35}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x745b7e8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e1a59c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45ec9300}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9608}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6140784f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x399718d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d9f10d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x592c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9144}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28d493d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc286cdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2758793a}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a7218a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x290a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7077}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x560000cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5449}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x278d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18821c6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79c9}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b027519}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5916f20d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5984104a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19653a38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaca7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cc9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0xa9a7c09131291199}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4008004}, 0xc095) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) socket$inet(0x2, 0x3, 0x2) (async) 05:56:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:49 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x2c000000, &(0x7f0000ffe000/0x2000)=nil) (async) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x1, 0x2010, r1, 0x82000000) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000100)={0x1, 0x4, 0x5, 0x7fff, 0x100000000, 0x7, 0x7fffffff000, 0x5be, 0xf726, 0x3, 0x9, 0x2}) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) (async) r3 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x3000) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={0x0}}, 0xd7a2edb63254819) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c040000", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2504"], 0x48c}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x186e4dad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3425b4a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb18e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe337}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1afdd72c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d9bf889}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="b1000010", @ANYRES16=0x0, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x801}, 0x84) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x1b, 0x8, 0x10001, 0x0, @remote, @empty, 0x1, 0x7800, 0x4, 0x2b92}}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x3bc, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x184, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55a6b241}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ee49af4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6426c96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74b4bd64}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14c32acc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d6b0a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c77cb6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4640ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26502d34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d42daea}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f18ef59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872e028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4771a6b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30ede324}]}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7de88125}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c4ddc3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6248e311}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50440ee6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34e6cd70}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4757ce21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26b7ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71e18a75}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616ee73f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13d214bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29f752ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61b3eba8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6583}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1689}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9767}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587c55be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdb1eca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be1d792}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53fe75ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb4e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe82}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c89cd3a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcda3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72591b92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x512dd4d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd797}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e565b75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c5f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5eeb66c7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d061b0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a9db885}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a772c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e4c9963}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x228e916a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69ef9ca0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x629c5e89}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b150bab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c9a0fa}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f460bf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x754592bd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52a077aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x20004045}, 0x20048010) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a8, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b35}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x745b7e8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e1a59c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45ec9300}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9608}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6140784f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x399718d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d9f10d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x592c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9144}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28d493d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc286cdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2758793a}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a7218a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x290a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7077}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x560000cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5449}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x278d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18821c6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79c9}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b027519}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5916f20d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5984104a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19653a38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaca7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cc9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0xa9a7c09131291199}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4008004}, 0xc095) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) socket$inet(0x2, 0x3, 0x2) 05:56:49 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x2c000000, &(0x7f0000ffe000/0x2000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x1, 0x2010, r1, 0x82000000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000100)={0x1, 0x4, 0x5, 0x7fff, 0x100000000, 0x7, 0x7fffffff000, 0x5be, 0xf726, 0x3, 0x9, 0x2}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) r3 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x3000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) shmget$private(0x0, 0x2000, 0x2c000000, &(0x7f0000ffe000/0x2000)=nil) (async) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x1, 0x2010, r1, 0x82000000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000100)={0x1, 0x4, 0x5, 0x7fff, 0x100000000, 0x7, 0x7fffffff000, 0x5be, 0xf726, 0x3, 0x9, 0x2}) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) (async) shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) (async) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x3000) (async) 05:56:49 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:49 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x88000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r7, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003fc0)={'team0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r11, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r10, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004000)={0xa98, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfa6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x1, 0x7f, 0xfffff001}, {0xa26, 0x2, 0x5, 0xff}, {0x7, 0x3, 0xfe, 0xa4f9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x108}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfa2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40c}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x9, 0x4, 0x20}, {0x3, 0xe, 0x7, 0x20}, {0x1533, 0x1, 0x8}, {0x9, 0x1, 0x6, 0x2}, {0x3, 0xff, 0x3, 0x2}, {0x7ff, 0x3f, 0x5, 0x2}, {0x0, 0xa, 0xab, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa98}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:49 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) 05:56:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000200)=""/86, 0x56}], 0x4, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/221, 0xdd}], 0x5, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x2, 0x2000, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000940)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000980)={0x0, 0x0, r3, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, 0x0, 0x0) r6 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r5, &(0x7f00000009c0)={r6, r0, 0xacf0}) 05:56:49 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xffffffc0, 0x100, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:49 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) 05:56:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000200)=""/86, 0x56}], 0x4, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/221, 0xdd}], 0x5, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x2, 0x2000, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000940)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000980)={0x0, 0x0, r3, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, 0x0, 0x0) r6 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r5, &(0x7f00000009c0)={r6, r0, 0xacf0}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000200)=""/86, 0x56}], 0x4, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/221, 0xdd}], 0x5, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x2, 0x2000, &(0x7f0000000900)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000940)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000980)={0x0, 0x0, r3, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) getpgid(0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r5, 0x0, 0x0) (async) epoll_create1(0x80000) (async) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r5, &(0x7f00000009c0)={r6, r0, 0xacf0}) (async) 05:56:49 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) (async) [ 1906.073517] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. 05:56:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) [ 1906.115485] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1906.148975] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. 05:56:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000200)=""/86, 0x56}], 0x4, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/221, 0xdd}], 0x5, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x2, 0x2000, &(0x7f0000000900)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000940)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000980)={0x0, 0x0, r3, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, 0x0, 0x0) r6 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r5, &(0x7f00000009c0)={r6, r0, 0xacf0}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000200)=""/86, 0x56}], 0x4, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/221, 0xdd}], 0x5, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x2, 0x2000, &(0x7f0000000900)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000940)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000980)={0x0, 0x0, r3, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) getpgid(0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r5, 0x0, 0x0) (async) epoll_create1(0x80000) (async) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r5, &(0x7f00000009c0)={r6, r0, 0xacf0}) (async) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xffffffc0, 0x100, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xffffffc0, 0x100, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:49 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) (async) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x88000) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r7, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003fc0)={'team0\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r11, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r10, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004000)={0xa98, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfa6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x1, 0x7f, 0xfffff001}, {0xa26, 0x2, 0x5, 0xff}, {0x7, 0x3, 0xfe, 0xa4f9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x108}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfa2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40c}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x9, 0x4, 0x20}, {0x3, 0xe, 0x7, 0x20}, {0x1533, 0x1, 0x8}, {0x9, 0x1, 0x6, 0x2}, {0x3, 0xff, 0x3, 0x2}, {0x7ff, 0x3f, 0x5, 0x2}, {0x0, 0xa, 0xab, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa98}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) 05:56:49 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x7, 0x1, 0x77, 0x0, 0x7fffffff, 0x40c18, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x102, 0x8, 0x80000001, 0x9, 0x8, 0x81, 0x101, 0x0, 0x16ab, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xb) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x4, 0x1, 0x1, 0x1}, {0x2}}, {{0x2, 0x0, 0x1}, {0x3}}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x20) r1 = perf_event_open(&(0x7f0000000040)={0xc05c1f1a3003ef5e, 0x80, 0x4, 0x4, 0x5, 0x6, 0x0, 0xa53c, 0x10, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp, 0x18072, 0x3, 0x1, 0x0, 0x9, 0x6, 0x8, 0x0, 0x3f, 0x0, 0x5}, 0x0, 0x6, r0, 0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x64e1) 05:56:49 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xffffffc0, 0x100, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:49 executing program 3: r0 = epoll_create(0x35) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) socket(0x22, 0x0, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x10000}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) 05:56:49 executing program 1: setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0x5, 0x4) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x3}) 05:56:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x62e, 0x2, 0xca38, 0x0, 0x0}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil}) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @short={0x2, 0xffff}}, 0x14) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r6}) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x7, 0x1, 0x77, 0x0, 0x7fffffff, 0x40c18, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x102, 0x8, 0x80000001, 0x9, 0x8, 0x81, 0x101, 0x0, 0x16ab, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xb) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x4, 0x1, 0x1, 0x1}, {0x2}}, {{0x2, 0x0, 0x1}, {0x3}}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x20) r1 = perf_event_open(&(0x7f0000000040)={0xc05c1f1a3003ef5e, 0x80, 0x4, 0x4, 0x5, 0x6, 0x0, 0xa53c, 0x10, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp, 0x18072, 0x3, 0x1, 0x0, 0x9, 0x6, 0x8, 0x0, 0x3f, 0x0, 0x5}, 0x0, 0x6, r0, 0x2) (async, rerun: 32) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x64e1) 05:56:50 executing program 3: r0 = epoll_create(0x35) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) socket(0x22, 0x0, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x10000}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) epoll_create(0x35) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) socket(0x22, 0x0, 0x1) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x10000}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r2, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) (async) [ 1906.339318] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1906.366594] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. 05:56:50 executing program 1: setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0x5, 0x4) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x3000) (async, rerun: 32) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x3}) (rerun: 32) 05:56:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async, rerun: 64) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (rerun: 64) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x62e, 0x2, 0xca38, 0x0, 0x0}) (async) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil}) (async) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @short={0x2, 0xffff}}, 0x14) (async, rerun: 32) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r6}) 05:56:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xfffffffd, 0x9, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000300)='.@\x00') r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x7, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, r4, r5, 0x0], 0x4}) 05:56:50 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) (async, rerun: 32) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x88000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 64) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r7, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003fc0)={'team0\x00', 0x0}) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r11, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r10, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004000)={0xa98, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfa6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x1, 0x7f, 0xfffff001}, {0xa26, 0x2, 0x5, 0xff}, {0x7, 0x3, 0xfe, 0xa4f9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x108}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfa2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40c}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x9, 0x4, 0x20}, {0x3, 0xe, 0x7, 0x20}, {0x1533, 0x1, 0x8}, {0x9, 0x1, 0x6, 0x2}, {0x3, 0xff, 0x3, 0x2}, {0x7ff, 0x3f, 0x5, 0x2}, {0x0, 0xa, 0xab, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa98}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) [ 1906.396137] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x7, 0x1, 0x77, 0x0, 0x7fffffff, 0x40c18, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x102, 0x8, 0x80000001, 0x9, 0x8, 0x81, 0x101, 0x0, 0x16ab, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xb) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x4, 0x1, 0x1, 0x1}, {0x2}}, {{0x2, 0x0, 0x1}, {0x3}}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x20) r1 = perf_event_open(&(0x7f0000000040)={0xc05c1f1a3003ef5e, 0x80, 0x4, 0x4, 0x5, 0x6, 0x0, 0xa53c, 0x10, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp, 0x18072, 0x3, 0x1, 0x0, 0x9, 0x6, 0x8, 0x0, 0x3f, 0x0, 0x5}, 0x0, 0x6, r0, 0x2) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x64e1) 05:56:50 executing program 3: r0 = epoll_create(0x35) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async, rerun: 32) socket(0x22, 0x0, 0x1) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x10000}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) (rerun: 64) 05:56:50 executing program 1: setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0x5, 0x4) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x3}) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 05:56:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async, rerun: 64) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (rerun: 64) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x62e, 0x2, 0xca38, 0x0, 0x0}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil}) (async) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @short={0x2, 0xffff}}, 0x14) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r6}) 05:56:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xfffffffd, 0x9, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000300)='.@\x00') (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x7, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, r4, r5, 0x0], 0x4}) 05:56:50 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000340)=""/40, 0x28}], 0x6, &(0x7f0000000400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/185, 0xb9}, {&(0x7f0000001680)=""/8, 0x8}], 0x5}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000001b80)=[{&(0x7f00000017c0)=""/71, 0x47}, {&(0x7f0000001840)=""/32, 0x20}, {&(0x7f0000001880)=""/100, 0x64}, {&(0x7f0000001900)=""/9, 0x9}, {&(0x7f0000001940)=""/192, 0xc0}, {&(0x7f0000001a00)=""/20, 0x14}, {&(0x7f0000001a40)=""/189, 0xbd}, {&(0x7f0000001b00)=""/23, 0x17}, {&(0x7f0000001b40)=""/26, 0x1a}], 0x9, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/48, 0x30}, {&(0x7f0000001d80)=""/44, 0x2c}, {&(0x7f0000001dc0)=""/144, 0x90}, {&(0x7f0000001e80)=""/225, 0xe1}], 0x4, &(0x7f0000001fc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}], 0x4, 0x10000, &(0x7f0000002200)={r0, r1+60000000}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x8001}) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 05:56:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xfffffffd, 0x9, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000300)='.@\x00') r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x7, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, r4, r5, 0x0], 0x4}) 05:56:50 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) (async) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000340)=""/40, 0x28}], 0x6, &(0x7f0000000400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/185, 0xb9}, {&(0x7f0000001680)=""/8, 0x8}], 0x5}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000001b80)=[{&(0x7f00000017c0)=""/71, 0x47}, {&(0x7f0000001840)=""/32, 0x20}, {&(0x7f0000001880)=""/100, 0x64}, {&(0x7f0000001900)=""/9, 0x9}, {&(0x7f0000001940)=""/192, 0xc0}, {&(0x7f0000001a00)=""/20, 0x14}, {&(0x7f0000001a40)=""/189, 0xbd}, {&(0x7f0000001b00)=""/23, 0x17}, {&(0x7f0000001b40)=""/26, 0x1a}], 0x9, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/48, 0x30}, {&(0x7f0000001d80)=""/44, 0x2c}, {&(0x7f0000001dc0)=""/144, 0x90}, {&(0x7f0000001e80)=""/225, 0xe1}], 0x4, &(0x7f0000001fc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}], 0x4, 0x10000, &(0x7f0000002200)={r0, r1+60000000}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x8001}) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) [ 1906.682552] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. 05:56:50 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(0x0) r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) 05:56:50 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x2000) 05:56:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/100}) 05:56:50 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) (async) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000340)=""/40, 0x28}], 0x6, &(0x7f0000000400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/185, 0xb9}, {&(0x7f0000001680)=""/8, 0x8}], 0x5}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000001b80)=[{&(0x7f00000017c0)=""/71, 0x47}, {&(0x7f0000001840)=""/32, 0x20}, {&(0x7f0000001880)=""/100, 0x64}, {&(0x7f0000001900)=""/9, 0x9}, {&(0x7f0000001940)=""/192, 0xc0}, {&(0x7f0000001a00)=""/20, 0x14}, {&(0x7f0000001a40)=""/189, 0xbd}, {&(0x7f0000001b00)=""/23, 0x17}, {&(0x7f0000001b40)=""/26, 0x1a}], 0x9, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/48, 0x30}, {&(0x7f0000001d80)=""/44, 0x2c}, {&(0x7f0000001dc0)=""/144, 0x90}, {&(0x7f0000001e80)=""/225, 0xe1}], 0x4, &(0x7f0000001fc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}], 0x4, 0x10000, &(0x7f0000002200)={r0, r1+60000000}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x8001}) 05:56:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x466002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000240)={&(0x7f0000000100)=[r3, r5, r3], &(0x7f0000000180)=[r4], 0x3, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x1}) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 05:56:50 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(0x0) r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) shmdt(0x0) (async) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 05:56:50 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x2000) (async) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 05:56:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005dc0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f00000002c0)=""/156, 0x9c}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000001900)=""/118, 0x75}, {&(0x7f0000000580)=""/16, 0x10}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000700), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000780)=""/32, 0x20}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/199, 0xc7}], 0x3}}, {{&(0x7f0000006100)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001980)=""/172, 0xac}, {&(0x7f0000001a40)=""/132, 0x84}, {&(0x7f0000001b00)=""/126, 0x7e}, {&(0x7f0000001b80)}], 0x4, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x2, &(0x7f0000006180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003dc0)=@abs, 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003e40)=""/110, 0x6e}, {&(0x7f0000003ec0)=""/4084, 0x1000}, {&(0x7f0000004ec0)=""/228, 0xe4}, {&(0x7f0000004fc0)=""/250, 0xfa}], 0x4}}, {{&(0x7f0000005100)=@abs, 0x6e, &(0x7f0000005400)=[{&(0x7f0000005180)=""/170, 0xaa}, {&(0x7f0000005240)=""/218, 0xda}, {&(0x7f0000005340)=""/158, 0x9e}], 0x3}}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/191, 0xbf}, {&(0x7f0000005500)=""/129, 0x81}], 0x2, &(0x7f0000005600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000005700)=@abs, 0x6e, &(0x7f0000005900)=[{&(0x7f0000005780)=""/109, 0x6d}, {&(0x7f0000005800)=""/208, 0xd0}], 0x2, &(0x7f0000005940)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x5a}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000005980)=""/200, 0xc8}, {&(0x7f0000005a80)=""/138, 0x8a}, {&(0x7f0000005b40)=""/16, 0x10}, {&(0x7f0000005b80)=""/202, 0xca}, {&(0x7f0000005c80)=""/140, 0x8c}], 0x5}}], 0xa, 0x1, &(0x7f0000006040)={0x0, 0x989680}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000006080)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000060c0)={0x101, r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x466002, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000240)={&(0x7f0000000100)=[r3, r5, r3], &(0x7f0000000180)=[r4], 0x3, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x1}) 05:56:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/100}) 05:56:50 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(0x0) (async) r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) 05:56:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005dc0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f00000002c0)=""/156, 0x9c}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000001900)=""/118, 0x75}, {&(0x7f0000000580)=""/16, 0x10}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000700), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000780)=""/32, 0x20}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/199, 0xc7}], 0x3}}, {{&(0x7f0000006100)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001980)=""/172, 0xac}, {&(0x7f0000001a40)=""/132, 0x84}, {&(0x7f0000001b00)=""/126, 0x7e}, {&(0x7f0000001b80)}], 0x4, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x2, &(0x7f0000006180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003dc0)=@abs, 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003e40)=""/110, 0x6e}, {&(0x7f0000003ec0)=""/4084, 0x1000}, {&(0x7f0000004ec0)=""/228, 0xe4}, {&(0x7f0000004fc0)=""/250, 0xfa}], 0x4}}, {{&(0x7f0000005100)=@abs, 0x6e, &(0x7f0000005400)=[{&(0x7f0000005180)=""/170, 0xaa}, {&(0x7f0000005240)=""/218, 0xda}, {&(0x7f0000005340)=""/158, 0x9e}], 0x3}}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/191, 0xbf}, {&(0x7f0000005500)=""/129, 0x81}], 0x2, &(0x7f0000005600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000005700)=@abs, 0x6e, &(0x7f0000005900)=[{&(0x7f0000005780)=""/109, 0x6d}, {&(0x7f0000005800)=""/208, 0xd0}], 0x2, &(0x7f0000005940)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x5a}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000005980)=""/200, 0xc8}, {&(0x7f0000005a80)=""/138, 0x8a}, {&(0x7f0000005b40)=""/16, 0x10}, {&(0x7f0000005b80)=""/202, 0xca}, {&(0x7f0000005c80)=""/140, 0x8c}], 0x5}}], 0xa, 0x1, &(0x7f0000006040)={0x0, 0x989680}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000006080)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000060c0)={0x101, r2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:50 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async, rerun: 32) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (rerun: 32) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 64) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 64) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x2000) 05:56:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x466002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000240)={&(0x7f0000000100)=[r3, r5, r3], &(0x7f0000000180)=[r4], 0x3, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x466002, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000280)={r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000240)={&(0x7f0000000100)=[r3, r5, r3], &(0x7f0000000180)=[r4], 0x3, 0x1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x1}) (async) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) (rerun: 64) 05:56:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/100}) 05:56:50 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 05:56:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005dc0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f00000002c0)=""/156, 0x9c}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000001900)=""/118, 0x75}, {&(0x7f0000000580)=""/16, 0x10}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000700), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000780)=""/32, 0x20}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/199, 0xc7}], 0x3}}, {{&(0x7f0000006100)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001980)=""/172, 0xac}, {&(0x7f0000001a40)=""/132, 0x84}, {&(0x7f0000001b00)=""/126, 0x7e}, {&(0x7f0000001b80)}], 0x4, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x2, &(0x7f0000006180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003dc0)=@abs, 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003e40)=""/110, 0x6e}, {&(0x7f0000003ec0)=""/4084, 0x1000}, {&(0x7f0000004ec0)=""/228, 0xe4}, {&(0x7f0000004fc0)=""/250, 0xfa}], 0x4}}, {{&(0x7f0000005100)=@abs, 0x6e, &(0x7f0000005400)=[{&(0x7f0000005180)=""/170, 0xaa}, {&(0x7f0000005240)=""/218, 0xda}, {&(0x7f0000005340)=""/158, 0x9e}], 0x3}}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/191, 0xbf}, {&(0x7f0000005500)=""/129, 0x81}], 0x2, &(0x7f0000005600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000005700)=@abs, 0x6e, &(0x7f0000005900)=[{&(0x7f0000005780)=""/109, 0x6d}, {&(0x7f0000005800)=""/208, 0xd0}], 0x2, &(0x7f0000005940)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x5a}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000005980)=""/200, 0xc8}, {&(0x7f0000005a80)=""/138, 0x8a}, {&(0x7f0000005b40)=""/16, 0x10}, {&(0x7f0000005b80)=""/202, 0xca}, {&(0x7f0000005c80)=""/140, 0x8c}], 0x5}}], 0xa, 0x1, &(0x7f0000006040)={0x0, 0x989680}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000006080)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000060c0)={0x101, r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:50 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:50 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 64) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (rerun: 64) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) 05:56:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0xdc, 0x5, 0x80, 0xeeeeeeee}) 05:56:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x20000005}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) 05:56:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, r2, 0x0, 0x0, r3, r4], &(0x7f0000000140)=[0x0], 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x204, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r5}) 05:56:50 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) (async) shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0xdc, 0x5, 0x80, 0xeeeeeeee}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0xdc, 0x5, 0x80, 0xeeeeeeee}) (async) 05:56:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x20000005}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x20000005}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) 05:56:50 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async) 05:56:50 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) (async) shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, r2, 0x0, 0x0, r3, r4], &(0x7f0000000140)=[0x0], 0x7, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x204, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r5}) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x20000005}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (rerun: 32) 05:56:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0xdc, 0x5, 0x80, 0xeeeeeeee}) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x3, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, r2, 0x0, 0x0, r3, r4], &(0x7f0000000140)=[0x0], 0x7, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x204, 0x1, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r5}) 05:56:51 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000000)=""/163, 0xa3}, {&(0x7f00000015c0)=""/4096, 0xff66}, {&(0x7f0000001240)=""/186, 0xba}], 0x5, &(0x7f0000001380)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000001480)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) recvmsg$can_raw(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/42, 0x2a}], 0x6, &(0x7f0000000500)=""/120, 0x78}, 0x20) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000005c0), 0x3910c0, 0x0) epoll_create1(0x0) socket$inet_sctp(0x2, 0x4, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, 0x0, 0x0) r5 = epoll_create(0xc279) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000600)={r5, r4, 0x2}) r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x9, 0x1) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x5}) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x84101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:51 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x7b, 0x8, 0x8, 0x0, 0x2, 0x840, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffffffff800, 0x4}, 0x11000, 0x4, 0x3b32, 0x0, 0x20, 0x0, 0x8, 0x0, 0x9, 0x0, 0x3f}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r1, 0x7fffffff) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x3, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) 05:56:51 executing program 3: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x84101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r2, r3], &(0x7f0000000100)=[0x0], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:51 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x7b, 0x8, 0x8, 0x0, 0x2, 0x840, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffffffff800, 0x4}, 0x11000, 0x4, 0x3b32, 0x0, 0x20, 0x0, 0x8, 0x0, 0x9, 0x0, 0x3f}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r1, 0x7fffffff) 05:56:51 executing program 3: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x84101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x3, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r2, r3], &(0x7f0000000100)=[0x0], 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r2, r3], &(0x7f0000000100)=[0x0], 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:51 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000000)=""/163, 0xa3}, {&(0x7f00000015c0)=""/4096, 0xff66}, {&(0x7f0000001240)=""/186, 0xba}], 0x5, &(0x7f0000001380)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000001480)) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) recvmsg$can_raw(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/42, 0x2a}], 0x6, &(0x7f0000000500)=""/120, 0x78}, 0x20) (async) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000005c0), 0x3910c0, 0x0) (async) epoll_create1(0x0) (async) socket$inet_sctp(0x2, 0x4, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, 0x0, 0x0) (async) r5 = epoll_create(0xc279) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000600)={r5, r4, 0x2}) (async) r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x9, 0x1) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x5}) 05:56:51 executing program 3: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) 05:56:51 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x7b, 0x8, 0x8, 0x0, 0x2, 0x840, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffffffff800, 0x4}, 0x11000, 0x4, 0x3b32, 0x0, 0x20, 0x0, 0x8, 0x0, 0x9, 0x0, 0x3f}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r1, 0x7fffffff) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x7b, 0x8, 0x8, 0x0, 0x2, 0x840, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffffffff800, 0x4}, 0x11000, 0x4, 0x3b32, 0x0, 0x20, 0x0, 0x8, 0x0, 0x9, 0x0, 0x3f}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) (async) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r1, 0x7fffffff) (async) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x3, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r2, r3], &(0x7f0000000100)=[0x0], 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) 05:56:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x100000000, 0x480000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r2, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={r3, 0x1}) 05:56:51 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x8200) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) 05:56:51 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000000)=""/163, 0xa3}, {&(0x7f00000015c0)=""/4096, 0xff66}, {&(0x7f0000001240)=""/186, 0xba}], 0x5, &(0x7f0000001380)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000001480)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) recvmsg$can_raw(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/42, 0x2a}], 0x6, &(0x7f0000000500)=""/120, 0x78}, 0x20) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000005c0), 0x3910c0, 0x0) epoll_create1(0x0) socket$inet_sctp(0x2, 0x4, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, 0x0, 0x0) r5 = epoll_create(0xc279) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000600)={r5, r4, 0x2}) r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x9, 0x1) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x5}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000000)=""/163, 0xa3}, {&(0x7f00000015c0)=""/4096, 0xff66}, {&(0x7f0000001240)=""/186, 0xba}], 0x5, &(0x7f0000001380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x1) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000001480)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) (async) recvmsg$can_raw(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/42, 0x2a}], 0x6, &(0x7f0000000500)=""/120, 0x78}, 0x20) (async) openat$vfio(0xffffffffffffff9c, &(0x7f00000005c0), 0x3910c0, 0x0) (async) epoll_create1(0x0) (async) socket$inet_sctp(0x2, 0x4, 0x84) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r4, 0x0, 0x0) (async) epoll_create(0xc279) (async) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000600)={r5, r4, 0x2}) (async) syz_open_dev$vcsa(&(0x7f0000000640), 0x9, 0x1) (async) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x5}) (async) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x3, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x3, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x100000000, 0x480000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r2, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={r3, 0x1}) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x8200) (rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (rerun: 32) 05:56:51 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x3, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:51 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x110, 0xffffffffffffffff, 0x7) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007f80)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/44, 0x2c}], 0x7, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000005c0), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/188, 0xbc}], 0x4, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000940)=""/48, 0x30}, {&(0x7f0000000980)=""/186, 0xba}, {&(0x7f0000000a40)=""/121, 0x79}, {&(0x7f0000000ac0)=""/154, 0x9a}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/71, 0x47}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x9, &(0x7f0000003d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000003e80)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003f00)=""/243, 0xf3}, {&(0x7f0000004000)=""/10, 0xa}], 0x2, &(0x7f0000004080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000006680)=[{&(0x7f0000004280)=""/55, 0x37}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/36, 0x24}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/142, 0x8e}, {&(0x7f00000063c0)=""/4, 0x4}, {&(0x7f0000006400)=""/157, 0x9d}, {&(0x7f00000064c0)=""/184, 0xb8}, {&(0x7f0000006580)=""/167, 0xa7}, {&(0x7f0000006640)=""/51, 0x33}], 0xa, &(0x7f0000006740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000006800), 0x6e, &(0x7f0000006b80)=[{&(0x7f0000006880)=""/144, 0x90}, {&(0x7f0000006940)=""/59, 0x3b}, {&(0x7f0000006980)=""/25, 0x19}, {&(0x7f00000069c0)=""/28, 0x1c}, {&(0x7f0000006a00)=""/116, 0x74}, {&(0x7f0000006a80)=""/85, 0x55}, {&(0x7f0000006b00)=""/92, 0x5c}], 0x7}}, {{&(0x7f0000006c00), 0x6e, &(0x7f0000007e80)=[{&(0x7f0000006c80)=""/18, 0x12}, {&(0x7f0000006cc0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/24, 0x18}, {&(0x7f0000007d00)=""/132, 0x84}, {&(0x7f0000007dc0)=""/147, 0x93}], 0x5, &(0x7f0000007f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x48}}], 0x7, 0x40012000, &(0x7f0000008140)={0x0, 0x989680}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 05:56:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x100000000, 0x480000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r2, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={r3, 0x1}) 05:56:51 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x8200) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x8200) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:51 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/147, 0x93}], 0x1, &(0x7f0000000180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f00000003c0)=""/5, 0x5}], 0x2, &(0x7f0000000440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000640)=""/6, 0x6}], 0x2, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/187, 0xbb}, {&(0x7f0000000b40)=""/243, 0xf3}], 0x7, &(0x7f0000000cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/224, 0xe0}], 0x1}}], 0x5, 0x10020, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000010c0)={0x1, &(0x7f0000001080)=[{}]}) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 05:56:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x2}) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = socket(0x2, 0x6, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40012140) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmget(0x1, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmdt(r3) 05:56:51 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) (async) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x110, 0xffffffffffffffff, 0x7) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007f80)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/44, 0x2c}], 0x7, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000005c0), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/188, 0xbc}], 0x4, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000940)=""/48, 0x30}, {&(0x7f0000000980)=""/186, 0xba}, {&(0x7f0000000a40)=""/121, 0x79}, {&(0x7f0000000ac0)=""/154, 0x9a}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/71, 0x47}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x9, &(0x7f0000003d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000003e80)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003f00)=""/243, 0xf3}, {&(0x7f0000004000)=""/10, 0xa}], 0x2, &(0x7f0000004080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000006680)=[{&(0x7f0000004280)=""/55, 0x37}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/36, 0x24}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/142, 0x8e}, {&(0x7f00000063c0)=""/4, 0x4}, {&(0x7f0000006400)=""/157, 0x9d}, {&(0x7f00000064c0)=""/184, 0xb8}, {&(0x7f0000006580)=""/167, 0xa7}, {&(0x7f0000006640)=""/51, 0x33}], 0xa, &(0x7f0000006740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000006800), 0x6e, &(0x7f0000006b80)=[{&(0x7f0000006880)=""/144, 0x90}, {&(0x7f0000006940)=""/59, 0x3b}, {&(0x7f0000006980)=""/25, 0x19}, {&(0x7f00000069c0)=""/28, 0x1c}, {&(0x7f0000006a00)=""/116, 0x74}, {&(0x7f0000006a80)=""/85, 0x55}, {&(0x7f0000006b00)=""/92, 0x5c}], 0x7}}, {{&(0x7f0000006c00), 0x6e, &(0x7f0000007e80)=[{&(0x7f0000006c80)=""/18, 0x12}, {&(0x7f0000006cc0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/24, 0x18}, {&(0x7f0000007d00)=""/132, 0x84}, {&(0x7f0000007dc0)=""/147, 0x93}], 0x5, &(0x7f0000007f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x48}}], 0x7, 0x40012000, &(0x7f0000008140)={0x0, 0x989680}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 05:56:51 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/147, 0x93}], 0x1, &(0x7f0000000180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f00000003c0)=""/5, 0x5}], 0x2, &(0x7f0000000440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000640)=""/6, 0x6}], 0x2, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/187, 0xbb}, {&(0x7f0000000b40)=""/243, 0xf3}], 0x7, &(0x7f0000000cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/224, 0xe0}], 0x1}}], 0x5, 0x10020, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000010c0)={0x1, &(0x7f0000001080)=[{}]}) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 05:56:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x2}) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, r1], &(0x7f0000000300)=[0x0], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x1, 0x9, 0x1, 0x0, 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x1db341, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000240)={r4, r5}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000500)={0x2, 0x2}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/147}) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x40) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f00000004c0)={0x400, 0x6, &(0x7f00000003c0)=[0xfffffffb, 0x0, 0x80, 0x2, 0x6e, 0x5], &(0x7f0000000400)=[0x0, 0x2, 0x7, 0xc4, 0x4, 0x3, 0x200, 0x10003], &(0x7f0000000440)=[0x4, 0x8], &(0x7f0000000480)=[0x80000000, 0x7, 0x5, 0x6], 0x0, 0x10003}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x4001, 0x1fd, 0x3}) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x200, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r2, r3, r4, r5, r6, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:51 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x110, 0xffffffffffffffff, 0x7) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007f80)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/44, 0x2c}], 0x7, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000005c0), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/188, 0xbc}], 0x4, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000940)=""/48, 0x30}, {&(0x7f0000000980)=""/186, 0xba}, {&(0x7f0000000a40)=""/121, 0x79}, {&(0x7f0000000ac0)=""/154, 0x9a}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/71, 0x47}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x9, &(0x7f0000003d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000003e80)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003f00)=""/243, 0xf3}, {&(0x7f0000004000)=""/10, 0xa}], 0x2, &(0x7f0000004080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000006680)=[{&(0x7f0000004280)=""/55, 0x37}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/36, 0x24}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/142, 0x8e}, {&(0x7f00000063c0)=""/4, 0x4}, {&(0x7f0000006400)=""/157, 0x9d}, {&(0x7f00000064c0)=""/184, 0xb8}, {&(0x7f0000006580)=""/167, 0xa7}, {&(0x7f0000006640)=""/51, 0x33}], 0xa, &(0x7f0000006740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000006800), 0x6e, &(0x7f0000006b80)=[{&(0x7f0000006880)=""/144, 0x90}, {&(0x7f0000006940)=""/59, 0x3b}, {&(0x7f0000006980)=""/25, 0x19}, {&(0x7f00000069c0)=""/28, 0x1c}, {&(0x7f0000006a00)=""/116, 0x74}, {&(0x7f0000006a80)=""/85, 0x55}, {&(0x7f0000006b00)=""/92, 0x5c}], 0x7}}, {{&(0x7f0000006c00), 0x6e, &(0x7f0000007e80)=[{&(0x7f0000006c80)=""/18, 0x12}, {&(0x7f0000006cc0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/24, 0x18}, {&(0x7f0000007d00)=""/132, 0x84}, {&(0x7f0000007dc0)=""/147, 0x93}], 0x5, &(0x7f0000007f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x48}}], 0x7, 0x40012000, &(0x7f0000008140)={0x0, 0x989680}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 05:56:51 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/147, 0x93}], 0x1, &(0x7f0000000180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f00000003c0)=""/5, 0x5}], 0x2, &(0x7f0000000440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000640)=""/6, 0x6}], 0x2, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/187, 0xbb}, {&(0x7f0000000b40)=""/243, 0xf3}], 0x7, &(0x7f0000000cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/224, 0xe0}], 0x1}}], 0x5, 0x10020, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000010c0)={0x1, &(0x7f0000001080)=[{}]}) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/147, 0x93}], 0x1, &(0x7f0000000180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f00000003c0)=""/5, 0x5}], 0x2, &(0x7f0000000440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000640)=""/6, 0x6}], 0x2, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/187, 0xbb}, {&(0x7f0000000b40)=""/243, 0xf3}], 0x7, &(0x7f0000000cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/224, 0xe0}], 0x1}}], 0x5, 0x10020, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000010c0)={0x1, &(0x7f0000001080)=[{}]}) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = socket(0x2, 0x6, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40012140) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmget(0x1, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) (async) shmdt(r3) 05:56:51 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmdt(r1) r2 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r3 = shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmdt(r3) 05:56:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x2}) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x4001, 0x1fd, 0x3}) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x200, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r2, r3, r4, r5, r6, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x4001, 0x1fd, 0x3}) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x200, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r2, r3, r4, r5, r6, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x9, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, r1], &(0x7f0000000300)=[0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x1, 0x9, 0x1, 0x0, 0x0}) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x1db341, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000240)={r4, r5}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000500)={0x2, 0x2}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/147}) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x40) (async) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f00000004c0)={0x400, 0x6, &(0x7f00000003c0)=[0xfffffffb, 0x0, 0x80, 0x2, 0x6e, 0x5], &(0x7f0000000400)=[0x0, 0x2, 0x7, 0xc4, 0x4, 0x3, 0x200, 0x10003], &(0x7f0000000440)=[0x4, 0x8], &(0x7f0000000480)=[0x80000000, 0x7, 0x5, 0x6], 0x0, 0x10003}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = socket(0x2, 0x6, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40012140) (async, rerun: 32) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x6000) (async, rerun: 32) shmget(0x1, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) (rerun: 32) shmdt(r3) 05:56:51 executing program 5: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x4000080) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x54000400, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) 05:56:51 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) (async) r1 = shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmdt(r1) r2 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) r3 = shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmdt(r3) 05:56:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, r1], &(0x7f0000000300)=[0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x1, 0x9, 0x1, 0x0, 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x1db341, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000240)={r4, r5}) (async) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000500)={0x2, 0x2}) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/147}) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x40) (async, rerun: 64) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (rerun: 64) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f00000004c0)={0x400, 0x6, &(0x7f00000003c0)=[0xfffffffb, 0x0, 0x80, 0x2, 0x6e, 0x5], &(0x7f0000000400)=[0x0, 0x2, 0x7, 0xc4, 0x4, 0x3, 0x200, 0x10003], &(0x7f0000000440)=[0x4, 0x8], &(0x7f0000000480)=[0x80000000, 0x7, 0x5, 0x6], 0x0, 0x10003}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) 05:56:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x4001, 0x1fd, 0x3}) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x200, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r2, r3, r4, r5, r6, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:51 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x4, 0x0, 0x8, 0x0, @mcast2, @mcast1, 0x720, 0x20, 0x0, 0x6}}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x402, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x4004) 05:56:51 executing program 5: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x4000080) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 32) r0 = shmget$private(0x0, 0x4000, 0x54000400, &(0x7f0000ff8000/0x4000)=nil) (rerun: 32) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) 05:56:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x4, 0x0, 0x8, 0x0, @mcast2, @mcast1, 0x720, 0x20, 0x0, 0x6}}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x402, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x4004) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmdt(r1) r2 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r3 = shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmdt(r3) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) (async) shmdt(r1) (async) shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) (async) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x1000) (async) shmdt(r3) (async) 05:56:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (rerun: 64) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 05:56:52 executing program 5: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x4000080) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x54000400, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0xff, @buffer={0x0, 0x9, &(0x7f0000000040)=""/9}, &(0x7f0000000080), &(0x7f00000000c0)=""/92, 0x9, 0x1, 0x2, &(0x7f0000000140)}) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x4, 0x0, 0x8, 0x0, @mcast2, @mcast1, 0x720, 0x20, 0x0, 0x6}}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x402, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x4004) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x4, 0x0, 0x8, 0x0, @mcast2, @mcast1, 0x720, 0x20, 0x0, 0x6}}) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x402, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x4004) (async) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil}) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r1, 0x7fff) shmget(0x3, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0xff, @buffer={0x0, 0x9, &(0x7f0000000040)=""/9}, &(0x7f0000000080), &(0x7f00000000c0)=""/92, 0x9, 0x1, 0x2, &(0x7f0000000140)}) (rerun: 32) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x3, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async, rerun: 64) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) (rerun: 64) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil}) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r1, 0x7fff) (async, rerun: 32) shmget(0x3, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) (rerun: 32) 05:56:52 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x1) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x3, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0xff, @buffer={0x0, 0x9, &(0x7f0000000040)=""/9}, &(0x7f0000000080), &(0x7f00000000c0)=""/92, 0x9, 0x1, 0x2, &(0x7f0000000140)}) 05:56:52 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x1) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x1) (async) shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3fd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000140)={0x3, 0x4, 0x6d, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=[0x8001, 0xc, 0x1, 0x82], &(0x7f0000000080)=[0x800, 0x400, 0x4d8], &(0x7f00000000c0)=[0x1, 0xff, 0xca, 0x6, 0x20, 0x4]}) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x3, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x26080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:52 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x1) (async) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:52 executing program 4: r0 = shmget(0x1, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil}) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r1, 0x7fff) shmget(0x3, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil}) (async) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r1, 0x7fff) (async) shmget(0x3, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) (async) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x26080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:52 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) 05:56:52 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0xe6}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x4894) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3fd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000140)={0x3, 0x4, 0x6d, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=[0x8001, 0xc, 0x1, 0x82], &(0x7f0000000080)=[0x800, 0x400, 0x4d8], &(0x7f00000000c0)=[0x1, 0xff, 0xca, 0x6, 0x20, 0x4]}) syz_open_dev$dri(&(0x7f0000000000), 0x3fd, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000140)={0x3, 0x4, 0x6d, 0xc0c0c0c0}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=[0x8001, 0xc, 0x1, 0x82], &(0x7f0000000080)=[0x800, 0x400, 0x4d8], &(0x7f00000000c0)=[0x1, 0xff, 0xca, 0x6, 0x20, 0x4]}) (async) 05:56:52 executing program 4: r0 = shmget(0x1, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x26080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:52 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) (async) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0xe6}) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x4894) 05:56:52 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, r1, 0x0, 0x0, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)) 05:56:52 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) 05:56:52 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, r1, 0x0, 0x0, 0x6}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)) 05:56:52 executing program 4: r0 = shmget(0x1, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmget(0x1, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f00000003c0)={0x4, 0x6, &(0x7f0000000180)=[0x6, 0x0, 0x1, 0x2, 0x4e4b, 0x8], &(0x7f0000000340)=[0x8, 0x5, 0x8001, 0x1f, 0xf96f, 0x2], &(0x7f0000000380)}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x4, 0x280) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r1}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000040)={0xef, &(0x7f0000000240)=""/239}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x75, 0xfffffffc, 0x2, 0x6, 0x39c18f8, 0x6b8b], &(0x7f00000000c0)=[0x0, 0x3, 0x9, 0xdb, 0x1000, 0x3, 0x6d4], &(0x7f0000000100)=[0x6fb, 0x9, 0x3, 0xc40], 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:52 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0xe6}) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x4894) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3fd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000140)={0x3, 0x4, 0x6d, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=[0x8001, 0xc, 0x1, 0x82], &(0x7f0000000080)=[0x800, 0x400, 0x4d8], &(0x7f00000000c0)=[0x1, 0xff, 0xca, 0x6, 0x20, 0x4]}) 05:56:52 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) 05:56:52 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, r1, 0x0, 0x0, 0x6}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x1428, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x2}}, 0x10) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004940)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000440)=""/75, 0x4b}], 0x6, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/33, 0x21}, {&(0x7f0000001680)=""/250, 0xfa}], 0x3, &(0x7f00000017c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/15, 0xf}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/120, 0x78}, {&(0x7f0000001c00)=""/195, 0xc3}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/203, 0xcb}, {&(0x7f0000002f00)=""/203, 0xcb}, {&(0x7f0000003000)=""/176, 0xb0}], 0x8, &(0x7f0000003140)}}, {{&(0x7f0000003180), 0x6e, &(0x7f0000004300)=[{&(0x7f0000003200)=""/137, 0x89}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)}], 0x3, &(0x7f0000004340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000004480)=@abs, 0x6e, &(0x7f0000004880)=[{&(0x7f0000004500)=""/151, 0x97}, {&(0x7f00000045c0)=""/159, 0x9f}, {&(0x7f0000004680)=""/7, 0x7}, {&(0x7f00000046c0)=""/241, 0xf1}, {&(0x7f00000047c0)=""/165, 0xa5}], 0x5, &(0x7f0000004900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x6, 0x40010000, &(0x7f0000004ac0)={0x0, 0x3938700}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000004b40)={0x2, 0x3, &(0x7f0000000000)=[0x0, 0x1ff, 0xa89c], &(0x7f0000003140)=[0x4, 0x3, 0x101, 0x80000000, 0x3], &(0x7f00000042c0)=[0x1, 0x400], &(0x7f0000004b00)=[0x7aa, 0x3ff, 0x76b, 0x200, 0x100, 0x1, 0xe58]}) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f00000003c0)={0x4, 0x6, &(0x7f0000000180)=[0x6, 0x0, 0x1, 0x2, 0x4e4b, 0x8], &(0x7f0000000340)=[0x8, 0x5, 0x8001, 0x1f, 0xf96f, 0x2], &(0x7f0000000380)}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x4, 0x280) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r1}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000040)={0xef, &(0x7f0000000240)=""/239}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x75, 0xfffffffc, 0x2, 0x6, 0x39c18f8, 0x6b8b], &(0x7f00000000c0)=[0x0, 0x3, 0x9, 0xdb, 0x1000, 0x3, 0x6d4], &(0x7f0000000100)=[0x6fb, 0x9, 0x3, 0xc40], 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x7fe8, 0x7f}) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000100)={0x0, 0x3}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil}) 05:56:52 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r0) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x1428, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000140)={0xffffffc3, 0xa, &(0x7f0000000040)=[0x7b3, 0x4, 0x1ff, 0x7f, 0x8, 0x66e0, 0x6, 0x9, 0x7, 0xff], &(0x7f0000000080), &(0x7f0000000100)=[0x96c6, 0x1, 0x0, 0x1, 0x6, 0xffff, 0x9]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x2}}, 0x10) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000004940)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000440)=""/75, 0x4b}], 0x6, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/33, 0x21}, {&(0x7f0000001680)=""/250, 0xfa}], 0x3, &(0x7f00000017c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/15, 0xf}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/120, 0x78}, {&(0x7f0000001c00)=""/195, 0xc3}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/203, 0xcb}, {&(0x7f0000002f00)=""/203, 0xcb}, {&(0x7f0000003000)=""/176, 0xb0}], 0x8, &(0x7f0000003140)}}, {{&(0x7f0000003180), 0x6e, &(0x7f0000004300)=[{&(0x7f0000003200)=""/137, 0x89}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)}], 0x3, &(0x7f0000004340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000004480)=@abs, 0x6e, &(0x7f0000004880)=[{&(0x7f0000004500)=""/151, 0x97}, {&(0x7f00000045c0)=""/159, 0x9f}, {&(0x7f0000004680)=""/7, 0x7}, {&(0x7f00000046c0)=""/241, 0xf1}, {&(0x7f00000047c0)=""/165, 0xa5}], 0x5, &(0x7f0000004900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x6, 0x40010000, &(0x7f0000004ac0)={0x0, 0x3938700}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000004b40)={0x2, 0x3, &(0x7f0000000000)=[0x0, 0x1ff, 0xa89c], &(0x7f0000003140)=[0x4, 0x3, 0x101, 0x80000000, 0x3], &(0x7f00000042c0)=[0x1, 0x400], &(0x7f0000004b00)=[0x7aa, 0x3ff, 0x76b, 0x200, 0x100, 0x1, 0xe58]}) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x7fe8, 0x7f}) (async) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000100)={0x0, 0x3}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil}) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f00000003c0)={0x4, 0x6, &(0x7f0000000180)=[0x6, 0x0, 0x1, 0x2, 0x4e4b, 0x8], &(0x7f0000000340)=[0x8, 0x5, 0x8001, 0x1f, 0xf96f, 0x2], &(0x7f0000000380)}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x4, 0x280) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r1}) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000040)={0xef, &(0x7f0000000240)=""/239}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x75, 0xfffffffc, 0x2, 0x6, 0x39c18f8, 0x6b8b], &(0x7f00000000c0)=[0x0, 0x3, 0x9, 0xdb, 0x1000, 0x3, 0x6d4], &(0x7f0000000100)=[0x6fb, 0x9, 0x3, 0xc40], 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x1428, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x1428, &(0x7f0000ffb000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:52 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmdt(r0) (async) 05:56:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000140)={0xffffffc3, 0xa, &(0x7f0000000040)=[0x7b3, 0x4, 0x1ff, 0x7f, 0x8, 0x66e0, 0x6, 0x9, 0x7, 0xff], &(0x7f0000000080), &(0x7f0000000100)=[0x96c6, 0x1, 0x0, 0x1, 0x6, 0xffff, 0x9]}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x7fe8, 0x7f}) (async, rerun: 32) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000100)={0x0, 0x3}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil}) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x2}}, 0x10) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004940)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000440)=""/75, 0x4b}], 0x6, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/33, 0x21}, {&(0x7f0000001680)=""/250, 0xfa}], 0x3, &(0x7f00000017c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/15, 0xf}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/120, 0x78}, {&(0x7f0000001c00)=""/195, 0xc3}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/203, 0xcb}, {&(0x7f0000002f00)=""/203, 0xcb}, {&(0x7f0000003000)=""/176, 0xb0}], 0x8, &(0x7f0000003140)}}, {{&(0x7f0000003180), 0x6e, &(0x7f0000004300)=[{&(0x7f0000003200)=""/137, 0x89}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)}], 0x3, &(0x7f0000004340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000004480)=@abs, 0x6e, &(0x7f0000004880)=[{&(0x7f0000004500)=""/151, 0x97}, {&(0x7f00000045c0)=""/159, 0x9f}, {&(0x7f0000004680)=""/7, 0x7}, {&(0x7f00000046c0)=""/241, 0xf1}, {&(0x7f00000047c0)=""/165, 0xa5}], 0x5, &(0x7f0000004900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x6, 0x40010000, &(0x7f0000004ac0)={0x0, 0x3938700}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000004b40)={0x2, 0x3, &(0x7f0000000000)=[0x0, 0x1ff, 0xa89c], &(0x7f0000003140)=[0x4, 0x3, 0x101, 0x80000000, 0x3], &(0x7f00000042c0)=[0x1, 0x400], &(0x7f0000004b00)=[0x7aa, 0x3ff, 0x76b, 0x200, 0x100, 0x1, 0xe58]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x2}}, 0x10) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000004940)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000440)=""/75, 0x4b}], 0x6, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/33, 0x21}, {&(0x7f0000001680)=""/250, 0xfa}], 0x3, &(0x7f00000017c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/15, 0xf}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/120, 0x78}, {&(0x7f0000001c00)=""/195, 0xc3}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/203, 0xcb}, {&(0x7f0000002f00)=""/203, 0xcb}, {&(0x7f0000003000)=""/176, 0xb0}], 0x8, &(0x7f0000003140)}}, {{&(0x7f0000003180), 0x6e, &(0x7f0000004300)=[{&(0x7f0000003200)=""/137, 0x89}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)}], 0x3, &(0x7f0000004340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000004480)=@abs, 0x6e, &(0x7f0000004880)=[{&(0x7f0000004500)=""/151, 0x97}, {&(0x7f00000045c0)=""/159, 0x9f}, {&(0x7f0000004680)=""/7, 0x7}, {&(0x7f00000046c0)=""/241, 0xf1}, {&(0x7f00000047c0)=""/165, 0xa5}], 0x5, &(0x7f0000004900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x6, 0x40010000, &(0x7f0000004ac0)={0x0, 0x3938700}) (async) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000004b40)={0x2, 0x3, &(0x7f0000000000)=[0x0, 0x1ff, 0xa89c], &(0x7f0000003140)=[0x4, 0x3, 0x101, 0x80000000, 0x3], &(0x7f00000042c0)=[0x1, 0x400], &(0x7f0000004b00)=[0x7aa, 0x3ff, 0x76b, 0x200, 0x100, 0x1, 0xe58]}) (async) 05:56:52 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmdt(r0) (async) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0xffff, 0x141000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x2, 0x200, 0x20000006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000140)={0xffffffc3, 0xa, &(0x7f0000000040)=[0x7b3, 0x4, 0x1ff, 0x7f, 0x8, 0x66e0, 0x6, 0x9, 0x7, 0xff], &(0x7f0000000080), &(0x7f0000000100)=[0x96c6, 0x1, 0x0, 0x1, 0x6, 0xffff, 0x9]}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4e64, 0x200}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000140)={&(0x7f00000000c0)=[r1, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$sg(&(0x7f0000000080), 0x6, 0x40) 05:56:52 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x2c080) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/176}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x2, 0x200, 0x20000006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) (rerun: 32) shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0xffff, 0x141000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x2, 0x200, 0x20000006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x2, 0x200, 0x20000006}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000000380)=""/251, 0xfb}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/74, 0x4a}], 0x5, &(0x7f0000000840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000002380)=""/215, 0xd7}, {&(0x7f0000000c00)=""/186, 0xba}], 0x4, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000000fc0)=""/97, 0x61}, {&(0x7f0000001040)=""/242, 0xf2}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/50, 0x32}, {&(0x7f0000002180)=""/29, 0x1d}, {&(0x7f00000021c0)=""/37, 0x25}], 0x7}}], 0x4, 0x40000020, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}], 0xaa0, 0x0, '\x00', 0x2, 0x1}) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4e64, 0x200}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000140)={&(0x7f00000000c0)=[r1, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) syz_open_dev$sg(&(0x7f0000000080), 0x6, 0x40) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x5000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) 05:56:52 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x2c080) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/176}) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4e64, 0x200}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000140)={&(0x7f00000000c0)=[r1, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) syz_open_dev$sg(&(0x7f0000000080), 0x6, 0x40) 05:56:52 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0xffff, 0x141000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) 05:56:52 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x2c080) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/176}) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000000380)=""/251, 0xfb}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/74, 0x4a}], 0x5, &(0x7f0000000840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000002380)=""/215, 0xd7}, {&(0x7f0000000c00)=""/186, 0xba}], 0x4, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000000fc0)=""/97, 0x61}, {&(0x7f0000001040)=""/242, 0xf2}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/50, 0x32}, {&(0x7f0000002180)=""/29, 0x1d}, {&(0x7f00000021c0)=""/37, 0x25}], 0x7}}], 0x4, 0x40000020, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}], 0xaa0, 0x0, '\x00', 0x2, 0x1}) 05:56:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x5000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:52 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r0}) 05:56:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xe63, 0x201, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:53 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) 05:56:53 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000000380)=""/251, 0xfb}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/74, 0x4a}], 0x5, &(0x7f0000000840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000002380)=""/215, 0xd7}, {&(0x7f0000000c00)=""/186, 0xba}], 0x4, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000000fc0)=""/97, 0x61}, {&(0x7f0000001040)=""/242, 0xf2}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/50, 0x32}, {&(0x7f0000002180)=""/29, 0x1d}, {&(0x7f00000021c0)=""/37, 0x25}], 0x7}}], 0x4, 0x40000020, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}], 0xaa0, 0x0, '\x00', 0x2, 0x1}) 05:56:53 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r0}) 05:56:53 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) 05:56:53 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x9000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:53 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r0}) (async) 05:56:53 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) (async) shmdt(r0) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) 05:56:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xe63, 0x201, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/148, 0x94}, {&(0x7f0000001300)=""/160, 0xa0}], 0x5}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/93, 0x5d}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/210, 0xd2}], 0x4, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f00000028c0)=""/37, 0x25}, {&(0x7f0000002900)=""/123, 0x7b}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/213, 0xd5}, {&(0x7f0000003a80)=""/222, 0xde}, {&(0x7f0000003b80)=""/7, 0x7}], 0x6}}, {{&(0x7f0000003c40), 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/255, 0xff}, {&(0x7f0000004dc0)}], 0x3, &(0x7f0000004e40)}}, {{&(0x7f0000004e80), 0x6e, &(0x7f00000051c0)=[{&(0x7f0000004f00)=""/180, 0xb4}, {&(0x7f0000004fc0)=""/128, 0x80}, {&(0x7f0000005040)=""/131, 0x83}, {&(0x7f0000005100)=""/135, 0x87}], 0x4, &(0x7f0000005200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000005340)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f00000053c0)=""/199, 0xc7}, {&(0x7f00000054c0)=""/24, 0x18}, {&(0x7f0000005500)=""/176, 0xb0}, {&(0x7f00000055c0)=""/41, 0x29}], 0x4, &(0x7f0000005640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x6, 0x50, 0x0) r3 = syz_open_dev$dri(&(0x7f00000059c0), 0x1ff, 0x4021c0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000005b00)={0x401, 0x4, &(0x7f0000005a00)=[0x3, 0xffff, 0x1c82, 0x1ff], &(0x7f0000005a40)=[0x5, 0x0, 0x8, 0x1000, 0x200, 0x8001, 0x242], &(0x7f0000005a80)=[0xe6, 0x8], &(0x7f0000005ac0)=[0xfffffbff, 0x80, 0x9, 0xfffff724], 0x0, 0x2}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000005940), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000005980)={0xfffffffffffffff7, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000005900)={0x6, 0x9, &(0x7f0000004dc0)=[0x7, 0x800, 0xfeff, 0xffff, 0x0, 0x7, 0x8001, 0xe2b0, 0x1], &(0x7f0000005880)=[0x3b, 0x6, 0x3, 0x3, 0x9], &(0x7f00000058c0)=[0x3, 0x85e4, 0x5, 0x4]}) 05:56:53 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x9000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2}}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0xa040) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000180)={0x0, &(0x7f0000000240)=""/241}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:53 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:53 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmget(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) (async) [ 1909.469305] Unknown ioctl -1071619020 05:56:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/148, 0x94}, {&(0x7f0000001300)=""/160, 0xa0}], 0x5}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/93, 0x5d}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/210, 0xd2}], 0x4, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f00000028c0)=""/37, 0x25}, {&(0x7f0000002900)=""/123, 0x7b}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/213, 0xd5}, {&(0x7f0000003a80)=""/222, 0xde}, {&(0x7f0000003b80)=""/7, 0x7}], 0x6}}, {{&(0x7f0000003c40), 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/255, 0xff}, {&(0x7f0000004dc0)}], 0x3, &(0x7f0000004e40)}}, {{&(0x7f0000004e80), 0x6e, &(0x7f00000051c0)=[{&(0x7f0000004f00)=""/180, 0xb4}, {&(0x7f0000004fc0)=""/128, 0x80}, {&(0x7f0000005040)=""/131, 0x83}, {&(0x7f0000005100)=""/135, 0x87}], 0x4, &(0x7f0000005200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000005340)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f00000053c0)=""/199, 0xc7}, {&(0x7f00000054c0)=""/24, 0x18}, {&(0x7f0000005500)=""/176, 0xb0}, {&(0x7f00000055c0)=""/41, 0x29}], 0x4, &(0x7f0000005640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x6, 0x50, 0x0) r3 = syz_open_dev$dri(&(0x7f00000059c0), 0x1ff, 0x4021c0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000005b00)={0x401, 0x4, &(0x7f0000005a00)=[0x3, 0xffff, 0x1c82, 0x1ff], &(0x7f0000005a40)=[0x5, 0x0, 0x8, 0x1000, 0x200, 0x8001, 0x242], &(0x7f0000005a80)=[0xe6, 0x8], &(0x7f0000005ac0)=[0xfffffbff, 0x80, 0x9, 0xfffff724], 0x0, 0x2}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000005940), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000005980)={0xfffffffffffffff7, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000005900)={0x6, 0x9, &(0x7f0000004dc0)=[0x7, 0x800, 0xfeff, 0xffff, 0x0, 0x7, 0x8001, 0xe2b0, 0x1], &(0x7f0000005880)=[0x3b, 0x6, 0x3, 0x3, 0x9], &(0x7f00000058c0)=[0x3, 0x85e4, 0x5, 0x4]}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/148, 0x94}, {&(0x7f0000001300)=""/160, 0xa0}], 0x5}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/93, 0x5d}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/210, 0xd2}], 0x4, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f00000028c0)=""/37, 0x25}, {&(0x7f0000002900)=""/123, 0x7b}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/213, 0xd5}, {&(0x7f0000003a80)=""/222, 0xde}, {&(0x7f0000003b80)=""/7, 0x7}], 0x6}}, {{&(0x7f0000003c40), 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/255, 0xff}, {&(0x7f0000004dc0)}], 0x3, &(0x7f0000004e40)}}, {{&(0x7f0000004e80), 0x6e, &(0x7f00000051c0)=[{&(0x7f0000004f00)=""/180, 0xb4}, {&(0x7f0000004fc0)=""/128, 0x80}, {&(0x7f0000005040)=""/131, 0x83}, {&(0x7f0000005100)=""/135, 0x87}], 0x4, &(0x7f0000005200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000005340)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f00000053c0)=""/199, 0xc7}, {&(0x7f00000054c0)=""/24, 0x18}, {&(0x7f0000005500)=""/176, 0xb0}, {&(0x7f00000055c0)=""/41, 0x29}], 0x4, &(0x7f0000005640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x6, 0x50, 0x0) (async) syz_open_dev$dri(&(0x7f00000059c0), 0x1ff, 0x4021c0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000005b00)={0x401, 0x4, &(0x7f0000005a00)=[0x3, 0xffff, 0x1c82, 0x1ff], &(0x7f0000005a40)=[0x5, 0x0, 0x8, 0x1000, 0x200, 0x8001, 0x242], &(0x7f0000005a80)=[0xe6, 0x8], &(0x7f0000005ac0)=[0xfffffbff, 0x80, 0x9, 0xfffff724], 0x0, 0x2}) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000005940), 0x2, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000005980)={0xfffffffffffffff7, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000005900)={0x6, 0x9, &(0x7f0000004dc0)=[0x7, 0x800, 0xfeff, 0xffff, 0x0, 0x7, 0x8001, 0xe2b0, 0x1], &(0x7f0000005880)=[0x3b, 0x6, 0x3, 0x3, 0x9], &(0x7f00000058c0)=[0x3, 0x85e4, 0x5, 0x4]}) (async) 05:56:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2}}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0xa040) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000180)={0x0, &(0x7f0000000240)=""/241}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2}}, 0x10) (async) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0xa040) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000180)={0x0, &(0x7f0000000240)=""/241}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:53 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x9000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:53 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:53 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8110, r0, 0x82000000) [ 1909.541703] Unknown ioctl -1071619020 05:56:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/148, 0x94}, {&(0x7f0000001300)=""/160, 0xa0}], 0x5}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/93, 0x5d}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/210, 0xd2}], 0x4, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f00000028c0)=""/37, 0x25}, {&(0x7f0000002900)=""/123, 0x7b}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/213, 0xd5}, {&(0x7f0000003a80)=""/222, 0xde}, {&(0x7f0000003b80)=""/7, 0x7}], 0x6}}, {{&(0x7f0000003c40), 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/255, 0xff}, {&(0x7f0000004dc0)}], 0x3, &(0x7f0000004e40)}}, {{&(0x7f0000004e80), 0x6e, &(0x7f00000051c0)=[{&(0x7f0000004f00)=""/180, 0xb4}, {&(0x7f0000004fc0)=""/128, 0x80}, {&(0x7f0000005040)=""/131, 0x83}, {&(0x7f0000005100)=""/135, 0x87}], 0x4, &(0x7f0000005200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000005340)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f00000053c0)=""/199, 0xc7}, {&(0x7f00000054c0)=""/24, 0x18}, {&(0x7f0000005500)=""/176, 0xb0}, {&(0x7f00000055c0)=""/41, 0x29}], 0x4, &(0x7f0000005640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x6, 0x50, 0x0) r3 = syz_open_dev$dri(&(0x7f00000059c0), 0x1ff, 0x4021c0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000005b00)={0x401, 0x4, &(0x7f0000005a00)=[0x3, 0xffff, 0x1c82, 0x1ff], &(0x7f0000005a40)=[0x5, 0x0, 0x8, 0x1000, 0x200, 0x8001, 0x242], &(0x7f0000005a80)=[0xe6, 0x8], &(0x7f0000005ac0)=[0xfffffbff, 0x80, 0x9, 0xfffff724], 0x0, 0x2}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000005940), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000005980)={0xfffffffffffffff7, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000005900)={0x6, 0x9, &(0x7f0000004dc0)=[0x7, 0x800, 0xfeff, 0xffff, 0x0, 0x7, 0x8001, 0xe2b0, 0x1], &(0x7f0000005880)=[0x3b, 0x6, 0x3, 0x3, 0x9], &(0x7f00000058c0)=[0x3, 0x85e4, 0x5, 0x4]}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/148, 0x94}, {&(0x7f0000001300)=""/160, 0xa0}], 0x5}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/93, 0x5d}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/210, 0xd2}], 0x4, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f00000028c0)=""/37, 0x25}, {&(0x7f0000002900)=""/123, 0x7b}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/213, 0xd5}, {&(0x7f0000003a80)=""/222, 0xde}, {&(0x7f0000003b80)=""/7, 0x7}], 0x6}}, {{&(0x7f0000003c40), 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/255, 0xff}, {&(0x7f0000004dc0)}], 0x3, &(0x7f0000004e40)}}, {{&(0x7f0000004e80), 0x6e, &(0x7f00000051c0)=[{&(0x7f0000004f00)=""/180, 0xb4}, {&(0x7f0000004fc0)=""/128, 0x80}, {&(0x7f0000005040)=""/131, 0x83}, {&(0x7f0000005100)=""/135, 0x87}], 0x4, &(0x7f0000005200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000005340)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f00000053c0)=""/199, 0xc7}, {&(0x7f00000054c0)=""/24, 0x18}, {&(0x7f0000005500)=""/176, 0xb0}, {&(0x7f00000055c0)=""/41, 0x29}], 0x4, &(0x7f0000005640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x6, 0x50, 0x0) (async) syz_open_dev$dri(&(0x7f00000059c0), 0x1ff, 0x4021c0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000005b00)={0x401, 0x4, &(0x7f0000005a00)=[0x3, 0xffff, 0x1c82, 0x1ff], &(0x7f0000005a40)=[0x5, 0x0, 0x8, 0x1000, 0x200, 0x8001, 0x242], &(0x7f0000005a80)=[0xe6, 0x8], &(0x7f0000005ac0)=[0xfffffbff, 0x80, 0x9, 0xfffff724], 0x0, 0x2}) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000005940), 0x2, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000005980)={0xfffffffffffffff7, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000005900)={0x6, 0x9, &(0x7f0000004dc0)=[0x7, 0x800, 0xfeff, 0xffff, 0x0, 0x7, 0x8001, 0xe2b0, 0x1], &(0x7f0000005880)=[0x3b, 0x6, 0x3, 0x3, 0x9], &(0x7f00000058c0)=[0x3, 0x85e4, 0x5, 0x4]}) (async) 05:56:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xe63, 0x201, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:53 executing program 1: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/1, 0x1}], 0x4, &(0x7f0000000240)=""/240, 0xf0}, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:53 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8110, r0, 0x82000000) 05:56:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2}}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0xa040) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000180)={0x0, &(0x7f0000000240)=""/241}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2}}, 0x10) (async) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0xa040) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000180)={0x0, &(0x7f0000000240)=""/241}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:53 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) [ 1909.638590] Unknown ioctl -1071619020 05:56:53 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8110, r0, 0x82000000) 05:56:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000080)={0x18, &(0x7f0000000040)=""/24}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000003c0)={r1, 0x1, &(0x7f00000002c0)=[0x1f], &(0x7f0000000300)=[0x101], 0x6, 0x5, 0xac71, &(0x7f0000000340)=[0x2, 0x6, 0x5c6f3339, 0x1, 0x0], &(0x7f0000000380)=[0x9, 0x2]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=0x0000000000000006,version=9p2000.L,nodevmap,debug=0x00000000000000ff,fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c6d61736b3d4d41595f415050454e442c6f626a5f757365723d53212c726f6f74632c736d61636b66737472616e026d7574653d2c7569643d000000000000000000000000000000baeb742b8893732cda0277764d600a0a1366066ba16e84b488a4b6d224ffff34045e7f91c051579812277ed4ed81a75bbad628ed95a3077939010d987b8a90b4a9823fdf5dec24aab8facaf79d7a3d3cf61a3e261f89d93e4a69f6a8ced6fa3571aea8f09d27eb7a", @ANYRESDEC=0xee01, @ANYBLOB=',hash,fsmagic=0x0000000000000800,\x00']) 05:56:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000080)={0x18, &(0x7f0000000040)=""/24}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0xd8300) 05:56:53 executing program 5: ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 05:56:53 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) 05:56:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000003c0)={r1, 0x1, &(0x7f00000002c0)=[0x1f], &(0x7f0000000300)=[0x101], 0x6, 0x5, 0xac71, &(0x7f0000000340)=[0x2, 0x6, 0x5c6f3339, 0x1, 0x0], &(0x7f0000000380)=[0x9, 0x2]}) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=0x0000000000000006,version=9p2000.L,nodevmap,debug=0x00000000000000ff,fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c6d61736b3d4d41595f415050454e442c6f626a5f757365723d53212c726f6f74632c736d61636b66737472616e026d7574653d2c7569643d000000000000000000000000000000baeb742b8893732cda0277764d600a0a1366066ba16e84b488a4b6d224ffff34045e7f91c051579812277ed4ed81a75bbad628ed95a3077939010d987b8a90b4a9823fdf5dec24aab8facaf79d7a3d3cf61a3e261f89d93e4a69f6a8ced6fa3571aea8f09d27eb7a", @ANYRESDEC=0xee01, @ANYBLOB=',hash,fsmagic=0x0000000000000800,\x00']) [ 1909.808096] Unknown ioctl 21377 [ 1909.812638] Unknown ioctl -1072667610 05:56:54 executing program 1: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/1, 0x1}], 0x4, &(0x7f0000000240)=""/240, 0xf0}, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getpgid(0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) (async) getpgid(0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/1, 0x1}], 0x4, &(0x7f0000000240)=""/240, 0xf0}, 0x1) (async) recvmsg$can_raw(r2, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0xd8300) 05:56:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000080)={0x18, &(0x7f0000000040)=""/24}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:54 executing program 5: ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 05:56:54 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000100)=""/250, 0xfa}], 0x2, &(0x7f0000000200)=""/179, 0xb3}, 0x40000000) 05:56:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000003c0)={r1, 0x1, &(0x7f00000002c0)=[0x1f], &(0x7f0000000300)=[0x101], 0x6, 0x5, 0xac71, &(0x7f0000000340)=[0x2, 0x6, 0x5c6f3339, 0x1, 0x0], &(0x7f0000000380)=[0x9, 0x2]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=0x0000000000000006,version=9p2000.L,nodevmap,debug=0x00000000000000ff,fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c6d61736b3d4d41595f415050454e442c6f626a5f757365723d53212c726f6f74632c736d61636b66737472616e026d7574653d2c7569643d000000000000000000000000000000baeb742b8893732cda0277764d600a0a1366066ba16e84b488a4b6d224ffff34045e7f91c051579812277ed4ed81a75bbad628ed95a3077939010d987b8a90b4a9823fdf5dec24aab8facaf79d7a3d3cf61a3e261f89d93e4a69f6a8ced6fa3571aea8f09d27eb7a", @ANYRESDEC=0xee01, @ANYBLOB=',hash,fsmagic=0x0000000000000800,\x00']) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000003c0)={r1, 0x1, &(0x7f00000002c0)=[0x1f], &(0x7f0000000300)=[0x101], 0x6, 0x5, 0xac71, &(0x7f0000000340)=[0x2, 0x6, 0x5c6f3339, 0x1, 0x0], &(0x7f0000000380)=[0x9, 0x2]}) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r2, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=0x0000000000000006,version=9p2000.L,nodevmap,debug=0x00000000000000ff,fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c6d61736b3d4d41595f415050454e442c6f626a5f757365723d53212c726f6f74632c736d61636b66737472616e026d7574653d2c7569643d000000000000000000000000000000baeb742b8893732cda0277764d600a0a1366066ba16e84b488a4b6d224ffff34045e7f91c051579812277ed4ed81a75bbad628ed95a3077939010d987b8a90b4a9823fdf5dec24aab8facaf79d7a3d3cf61a3e261f89d93e4a69f6a8ced6fa3571aea8f09d27eb7a", @ANYRESDEC=0xee01, @ANYBLOB=',hash,fsmagic=0x0000000000000800,\x00']) (async) 05:56:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0xd8300) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0xd8300) (async) 05:56:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x8}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x22402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x7fffffff, 0xfff, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:54 executing program 5: ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 64) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) (rerun: 64) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 05:56:54 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x8000001, 0x0, 0x2}) 05:56:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x7, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28d8, 0xfffffffd}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r3}) 05:56:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x8}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x22402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x7fffffff, 0xfff, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x8}) (async) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x22402, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x7fffffff, 0xfff, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) [ 1910.613345] Unknown ioctl 21377 [ 1910.616973] Unknown ioctl -1072667610 [ 1910.652113] Unknown ioctl -1071618894 05:56:54 executing program 1: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/1, 0x1}], 0x4, &(0x7f0000000240)=""/240, 0xf0}, 0x1) (async) recvmsg$can_raw(r2, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1910.704352] Unknown ioctl 21377 [ 1910.716591] Unknown ioctl -1072667610 05:56:54 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x8000001, 0x0, 0x2}) 05:56:54 executing program 5: r0 = shmget(0x2, 0x3000, 0x780003dc, &(0x7f0000ffd000/0x3000)=nil) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmdt(r2) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 05:56:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x8}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x22402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x7fffffff, 0xfff, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x8}) (async) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x22402, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x7fffffff, 0xfff, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) [ 1910.747864] Unknown ioctl -1071618894 [ 1910.807898] Unknown ioctl -1071618894 05:56:55 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x8000001, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x8000001, 0x0, 0x2}) (async) 05:56:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x7, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28d8, 0xfffffffd}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x7, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28d8, 0xfffffffd}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r3}) (async) 05:56:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) accept$unix(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:55 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) (async) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000100)=""/250, 0xfa}], 0x2, &(0x7f0000000200)=""/179, 0xb3}, 0x40000000) 05:56:55 executing program 5: r0 = shmget(0x2, 0x3000, 0x780003dc, &(0x7f0000ffd000/0x3000)=nil) (async) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r2 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmdt(r2) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 05:56:55 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000040), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000140)=""/83, 0x53}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/162, 0xa2}, {&(0x7f00000012c0)=""/83, 0x53}, {&(0x7f0000001340)=""/63, 0x3f}, {&(0x7f0000001380)=""/124, 0x7c}], 0x8, &(0x7f0000001480)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x128}, 0x40002042) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000001680)={&(0x7f0000001600)=[0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0], 0x2}) r7 = perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x3, 0xfe, 0xf9, 0x0, 0x0, 0x3d513d20, 0x850b, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001780), 0x1}, 0x48c20, 0x8001, 0x1, 0x3, 0x23, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1e0000000000}, r5, 0xb, r3, 0x9) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x12000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f00000018c0)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r0) r9 = perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0xa0, 0x7f, 0x6, 0x1f, 0x0, 0x100, 0x12200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000016c0), 0x8}, 0xe402, 0x400, 0x2, 0x3, 0x4, 0x2, 0x0, 0x0, 0x100, 0x0, 0x7}, r6, 0xa, r2, 0x12) ioctl$PERF_EVENT_IOC_QUERY_BPF(r9, 0xc008240a, &(0x7f0000001840)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x3}) 05:56:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x7, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28d8, 0xfffffffd}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x2, 0x7, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28d8, 0xfffffffd}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r3}) (async) 05:56:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) accept$unix(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) socket(0x18, 0x0, 0x0) (async) accept$unix(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:55 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) 05:56:55 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000040), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000140)=""/83, 0x53}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/162, 0xa2}, {&(0x7f00000012c0)=""/83, 0x53}, {&(0x7f0000001340)=""/63, 0x3f}, {&(0x7f0000001380)=""/124, 0x7c}], 0x8, &(0x7f0000001480)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x128}, 0x40002042) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000001680)={&(0x7f0000001600)=[0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0], 0x2}) r7 = perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x3, 0xfe, 0xf9, 0x0, 0x0, 0x3d513d20, 0x850b, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001780), 0x1}, 0x48c20, 0x8001, 0x1, 0x3, 0x23, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1e0000000000}, r5, 0xb, r3, 0x9) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x12000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f00000018c0)) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r0) (async) r9 = perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0xa0, 0x7f, 0x6, 0x1f, 0x0, 0x100, 0x12200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000016c0), 0x8}, 0xe402, 0x400, 0x2, 0x3, 0x4, 0x2, 0x0, 0x0, 0x100, 0x0, 0x7}, r6, 0xa, r2, 0x12) ioctl$PERF_EVENT_IOC_QUERY_BPF(r9, 0xc008240a, &(0x7f0000001840)={0x3, 0x0, [0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x3}) 05:56:55 executing program 5: r0 = shmget(0x2, 0x3000, 0x780003dc, &(0x7f0000ffd000/0x3000)=nil) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmdt(r2) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmget(0x2, 0x3000, 0x780003dc, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) shmdt(r2) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) 05:56:55 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000000)=[0x977, 0x7, 0x3, 0x7308bea5], &(0x7f0000000040)=[0xe8, 0x1, 0x5fd, 0x559, 0x101], 0x4, 0x5, 0xfffffbdb, &(0x7f0000000080)=[0x400080, 0x8, 0x72b, 0x1, 0x2], &(0x7f00000000c0)=[0x4, 0xd7, 0x1, 0xcb, 0x2, 0x8, 0xfffffffc, 0x293d]}) 05:56:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) accept$unix(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:55 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) 05:56:56 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 64) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (rerun: 64) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async, rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) recvmsg$can_raw(r1, 0x0, 0x0) (async) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000100)=""/250, 0xfa}], 0x2, &(0x7f0000000200)=""/179, 0xb3}, 0x40000000) 05:56:56 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000000)=[0x977, 0x7, 0x3, 0x7308bea5], &(0x7f0000000040)=[0xe8, 0x1, 0x5fd, 0x559, 0x101], 0x4, 0x5, 0xfffffbdb, &(0x7f0000000080)=[0x400080, 0x8, 0x72b, 0x1, 0x2], &(0x7f00000000c0)=[0x4, 0xd7, 0x1, 0xcb, 0x2, 0x8, 0xfffffffc, 0x293d]}) 05:56:56 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000040), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000140)=""/83, 0x53}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/162, 0xa2}, {&(0x7f00000012c0)=""/83, 0x53}, {&(0x7f0000001340)=""/63, 0x3f}, {&(0x7f0000001380)=""/124, 0x7c}], 0x8, &(0x7f0000001480)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x128}, 0x40002042) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000001680)={&(0x7f0000001600)=[0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0], 0x2}) (async) r7 = perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x3, 0xfe, 0xf9, 0x0, 0x0, 0x3d513d20, 0x850b, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001780), 0x1}, 0x48c20, 0x8001, 0x1, 0x3, 0x23, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1e0000000000}, r5, 0xb, r3, 0x9) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x12000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f00000018c0)) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r0) (async, rerun: 64) r9 = perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0xa0, 0x7f, 0x6, 0x1f, 0x0, 0x100, 0x12200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000016c0), 0x8}, 0xe402, 0x400, 0x2, 0x3, 0x4, 0x2, 0x0, 0x0, 0x100, 0x0, 0x7}, r6, 0xa, r2, 0x12) ioctl$PERF_EVENT_IOC_QUERY_BPF(r9, 0xc008240a, &(0x7f0000001840)={0x3, 0x0, [0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x3}) 05:56:56 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) 05:56:56 executing program 5: recvmsg$unix(0xffffffffffffffff, &(0x7f000001a700)={0x0, 0x0, &(0x7f000001a680)=[{&(0x7f0000019380)=""/209, 0xd1}, {&(0x7f0000019480)=""/245, 0xf5}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000019580)=""/4096, 0x1000}, {&(0x7f000001a580)=""/216, 0xd8}], 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000000001100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f000001a740)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f000001a780)={0xffffffff, r1}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0xe7, 0x1, @buffer={0x0, 0xcc, &(0x7f0000019280)=""/204}, &(0x7f0000000080)="086225fcf3de4eb92049527204146dff2e6112d92ebb93425214518a98bf19337e182865c1fe1f5f4bb2642eadd7c58f93408a8504d42829759cdaecf12969c75f26b5d99573fc5a1e8d3ced9fd96b46cfc03e64d131a5f8b9d60ad4536a9ed4533383b439d21bb029bd03182d3e36fc81c0b83840193991c57d82435291bc1cfe06a3cdc9f5f71a472c109378b18b9705683baad48a0b8986d547e253b92bd55d0d475813bf0ca75739cb114ee87fb388604204936072665c775952311abb0ba24e237e499a216614ac8c822fd54a992599d8c06750616badd5c7d10300"/231, &(0x7f0000000280)=""/102400, 0x8, 0x10015, 0xffffffffffffffff, &(0x7f00000001c0)}) socket(0x22, 0x3, 0x8) 05:56:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x202000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000200)={r7}) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000080)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000000200)={r7}) 05:56:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 05:56:56 executing program 5: recvmsg$unix(0xffffffffffffffff, &(0x7f000001a700)={0x0, 0x0, &(0x7f000001a680)=[{&(0x7f0000019380)=""/209, 0xd1}, {&(0x7f0000019480)=""/245, 0xf5}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000019580)=""/4096, 0x1000}, {&(0x7f000001a580)=""/216, 0xd8}], 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000000001100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30}, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f000001a740)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f000001a780)={0xffffffff, r1}) (async) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0xe7, 0x1, @buffer={0x0, 0xcc, &(0x7f0000019280)=""/204}, &(0x7f0000000080)="086225fcf3de4eb92049527204146dff2e6112d92ebb93425214518a98bf19337e182865c1fe1f5f4bb2642eadd7c58f93408a8504d42829759cdaecf12969c75f26b5d99573fc5a1e8d3ced9fd96b46cfc03e64d131a5f8b9d60ad4536a9ed4533383b439d21bb029bd03182d3e36fc81c0b83840193991c57d82435291bc1cfe06a3cdc9f5f71a472c109378b18b9705683baad48a0b8986d547e253b92bd55d0d475813bf0ca75739cb114ee87fb388604204936072665c775952311abb0ba24e237e499a216614ac8c822fd54a992599d8c06750616badd5c7d10300"/231, &(0x7f0000000280)=""/102400, 0x8, 0x10015, 0xffffffffffffffff, &(0x7f00000001c0)}) (async) socket(0x22, 0x3, 0x8) 05:56:56 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000000)=[0x977, 0x7, 0x3, 0x7308bea5], &(0x7f0000000040)=[0xe8, 0x1, 0x5fd, 0x559, 0x101], 0x4, 0x5, 0xfffffbdb, &(0x7f0000000080)=[0x400080, 0x8, 0x72b, 0x1, 0x2], &(0x7f00000000c0)=[0x4, 0xd7, 0x1, 0xcb, 0x2, 0x8, 0xfffffffc, 0x293d]}) 05:56:56 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) socket$inet_udp(0x2, 0x2, 0x0) r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) r1 = shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x4000) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x82000000) shmdt(0x0) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) 05:56:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x202000) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000200)={r7}) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000080)) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000000200)={r7}) 05:56:56 executing program 4: r0 = shmget(0x3, 0x4000, 0x29, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 05:56:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x6, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000540)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000640)={&(0x7f00000005c0)=[0x0, r1, r8, r1, r9], &(0x7f0000000600)=[r3], 0x5}) r10 = syz_open_dev$dri(&(0x7f0000000700), 0x7, 0x4000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r10, 0xc01864ba, &(0x7f0000000740)={0x3, 0x52e, 0x2, 0xe0e0e0e0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, r1, r2], &(0x7f0000000480)=[0x0, r4, r5, r6, 0x0, r7], 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8080000, 0x200, 0x1, 0x0, 0x0}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000500)={0x0, 0x1, 0xffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000006c0)={0x7, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r11}) 05:56:56 executing program 5: recvmsg$unix(0xffffffffffffffff, &(0x7f000001a700)={0x0, 0x0, &(0x7f000001a680)=[{&(0x7f0000019380)=""/209, 0xd1}, {&(0x7f0000019480)=""/245, 0xf5}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000019580)=""/4096, 0x1000}, {&(0x7f000001a580)=""/216, 0xd8}], 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000000001100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f000001a740)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f000001a780)={0xffffffff, r1}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0xe7, 0x1, @buffer={0x0, 0xcc, &(0x7f0000019280)=""/204}, &(0x7f0000000080)="086225fcf3de4eb92049527204146dff2e6112d92ebb93425214518a98bf19337e182865c1fe1f5f4bb2642eadd7c58f93408a8504d42829759cdaecf12969c75f26b5d99573fc5a1e8d3ced9fd96b46cfc03e64d131a5f8b9d60ad4536a9ed4533383b439d21bb029bd03182d3e36fc81c0b83840193991c57d82435291bc1cfe06a3cdc9f5f71a472c109378b18b9705683baad48a0b8986d547e253b92bd55d0d475813bf0ca75739cb114ee87fb388604204936072665c775952311abb0ba24e237e499a216614ac8c822fd54a992599d8c06750616badd5c7d10300"/231, &(0x7f0000000280)=""/102400, 0x8, 0x10015, 0xffffffffffffffff, &(0x7f00000001c0)}) socket(0x22, 0x3, 0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f000001a700)={0x0, 0x0, &(0x7f000001a680)=[{&(0x7f0000019380)=""/209, 0xd1}, {&(0x7f0000019480)=""/245, 0xf5}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000019580)=""/4096, 0x1000}, {&(0x7f000001a580)=""/216, 0xd8}], 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000000001100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30}, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f000001a740)={0x5, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f000001a780)={0xffffffff, r1}) (async) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0xe7, 0x1, @buffer={0x0, 0xcc, &(0x7f0000019280)=""/204}, &(0x7f0000000080)="086225fcf3de4eb92049527204146dff2e6112d92ebb93425214518a98bf19337e182865c1fe1f5f4bb2642eadd7c58f93408a8504d42829759cdaecf12969c75f26b5d99573fc5a1e8d3ced9fd96b46cfc03e64d131a5f8b9d60ad4536a9ed4533383b439d21bb029bd03182d3e36fc81c0b83840193991c57d82435291bc1cfe06a3cdc9f5f71a472c109378b18b9705683baad48a0b8986d547e253b92bd55d0d475813bf0ca75739cb114ee87fb388604204936072665c775952311abb0ba24e237e499a216614ac8c822fd54a992599d8c06750616badd5c7d10300"/231, &(0x7f0000000280)=""/102400, 0x8, 0x10015, 0xffffffffffffffff, &(0x7f00000001c0)}) (async) socket(0x22, 0x3, 0x8) (async) 05:56:56 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) (async) r1 = shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x4000) (async) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x82000000) shmdt(0x0) (async) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) 05:56:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x202000) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r5}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000200)={r7}) (async) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000080)) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000000200)={r7}) 05:56:56 executing program 4: r0 = shmget(0x3, 0x4000, 0x29, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 05:56:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x6, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000540)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000640)={&(0x7f00000005c0)=[0x0, r1, r8, r1, r9], &(0x7f0000000600)=[r3], 0x5}) r10 = syz_open_dev$dri(&(0x7f0000000700), 0x7, 0x4000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r10, 0xc01864ba, &(0x7f0000000740)={0x3, 0x52e, 0x2, 0xe0e0e0e0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, r1, r2], &(0x7f0000000480)=[0x0, r4, r5, r6, 0x0, r7], 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8080000, 0x200, 0x1, 0x0, 0x0}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000500)={0x0, 0x1, 0xffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000006c0)={0x7, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r11}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x6, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000540)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000640)={&(0x7f00000005c0)=[0x0, r1, r8, r1, r9], &(0x7f0000000600)=[r3], 0x5}) (async) syz_open_dev$dri(&(0x7f0000000700), 0x7, 0x4000) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r10, 0xc01864ba, &(0x7f0000000740)={0x3, 0x52e, 0x2, 0xe0e0e0e0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, r1, r2], &(0x7f0000000480)=[0x0, r4, r5, r6, 0x0, r7], 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8080000, 0x200, 0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000500)={0x0, 0x1, 0xffff}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000006c0)={0x7, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r11}) (async) 05:56:56 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0000) pipe2$9p(&(0x7f0000000000), 0x6000) r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) socket$can_raw(0x1d, 0x3, 0x1) shmdt(r0) 05:56:56 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) r1 = shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x4000) (async) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x82000000) (async, rerun: 32) shmdt(0x0) (rerun: 32) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) 05:56:56 executing program 4: r0 = shmget(0x3, 0x4000, 0x29, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x208, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x4}) 05:56:56 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0000) pipe2$9p(&(0x7f0000000000), 0x6000) r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) (async) socket$can_raw(0x1d, 0x3, 0x1) shmdt(r0) 05:56:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x6, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000540)={r1}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={r1}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000640)={&(0x7f00000005c0)=[0x0, r1, r8, r1, r9], &(0x7f0000000600)=[r3], 0x5}) (async) r10 = syz_open_dev$dri(&(0x7f0000000700), 0x7, 0x4000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r10, 0xc01864ba, &(0x7f0000000740)={0x3, 0x52e, 0x2, 0xe0e0e0e0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, r1, r2], &(0x7f0000000480)=[0x0, r4, r5, r6, 0x0, r7], 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8080000, 0x200, 0x1, 0x0, 0x0}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000500)={0x0, 0x1, 0xffff}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000006c0)={0x7, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r11}) 05:56:56 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x4}) 05:56:56 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r1) 05:56:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x208, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:56 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 05:56:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x4}) (async) 05:56:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003400)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/199, 0xc7}], 0x2, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000002900)=[{&(0x7f0000001740)=""/192, 0xc0}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/246, 0xf6}], 0x3, &(0x7f0000002940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000ff000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xf8}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002ac0)=""/143, 0x8f}, {&(0x7f0000002b80)=""/144, 0x90}, {&(0x7f0000002c40)=""/47, 0x2f}, {&(0x7f0000002c80)=""/225, 0xe1}, {&(0x7f0000002d80)=""/36, 0x24}], 0x5}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002ec0)=""/79, 0x4f}, {&(0x7f0000002f40)=""/233, 0xe9}, {&(0x7f0000003040)=""/100, 0x64}], 0x3, &(0x7f0000003100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000031c0)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003240)=""/65, 0x41}, {&(0x7f00000032c0)=""/254, 0xfe}], 0x2}}], 0x5, 0x40002000, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000003600)={0x2, 0x2, &(0x7f0000003540)=[0x40, 0x40], &(0x7f0000003580)=[0xf7, 0x3, 0x0, 0x3, 0xeb59], &(0x7f00000035c0)=[0xf5, 0xfff, 0x6, 0x8000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r3}) 05:56:56 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0000) pipe2$9p(&(0x7f0000000000), 0x6000) r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) socket$can_raw(0x1d, 0x3, 0x1) shmdt(r0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0000) (async) pipe2$9p(&(0x7f0000000000), 0x6000) (async) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) shmdt(r0) (async) 05:56:56 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) shmdt(r1) 05:56:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x208, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 05:56:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003400)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/199, 0xc7}], 0x2, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000002900)=[{&(0x7f0000001740)=""/192, 0xc0}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/246, 0xf6}], 0x3, &(0x7f0000002940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000ff000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xf8}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002ac0)=""/143, 0x8f}, {&(0x7f0000002b80)=""/144, 0x90}, {&(0x7f0000002c40)=""/47, 0x2f}, {&(0x7f0000002c80)=""/225, 0xe1}, {&(0x7f0000002d80)=""/36, 0x24}], 0x5}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002ec0)=""/79, 0x4f}, {&(0x7f0000002f40)=""/233, 0xe9}, {&(0x7f0000003040)=""/100, 0x64}], 0x3, &(0x7f0000003100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000031c0)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003240)=""/65, 0x41}, {&(0x7f00000032c0)=""/254, 0xfe}], 0x2}}], 0x5, 0x40002000, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000003600)={0x2, 0x2, &(0x7f0000003540)=[0x40, 0x40], &(0x7f0000003580)=[0xf7, 0x3, 0x0, 0x3, 0xeb59], &(0x7f00000035c0)=[0xf5, 0xfff, 0x6, 0x8000]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r3}) 05:56:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x4200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x181080) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0x5, r2}) 05:56:56 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:56:56 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) shmdt(r1) 05:56:56 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 05:56:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x600200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r3}) 05:56:56 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) shmdt(r0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x3000003, 0x10, 0xffffffffffffffff, 0x82000000) 05:56:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003400)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/199, 0xc7}], 0x2, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000002900)=[{&(0x7f0000001740)=""/192, 0xc0}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/246, 0xf6}], 0x3, &(0x7f0000002940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000ff000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xf8}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002ac0)=""/143, 0x8f}, {&(0x7f0000002b80)=""/144, 0x90}, {&(0x7f0000002c40)=""/47, 0x2f}, {&(0x7f0000002c80)=""/225, 0xe1}, {&(0x7f0000002d80)=""/36, 0x24}], 0x5}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002ec0)=""/79, 0x4f}, {&(0x7f0000002f40)=""/233, 0xe9}, {&(0x7f0000003040)=""/100, 0x64}], 0x3, &(0x7f0000003100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000031c0)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003240)=""/65, 0x41}, {&(0x7f00000032c0)=""/254, 0xfe}], 0x2}}], 0x5, 0x40002000, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000003600)={0x2, 0x2, &(0x7f0000003540)=[0x40, 0x40], &(0x7f0000003580)=[0xf7, 0x3, 0x0, 0x3, 0xeb59], &(0x7f00000035c0)=[0xf5, 0xfff, 0x6, 0x8000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003400)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/199, 0xc7}], 0x2, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000002900)=[{&(0x7f0000001740)=""/192, 0xc0}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/246, 0xf6}], 0x3, &(0x7f0000002940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000ff000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xf8}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002ac0)=""/143, 0x8f}, {&(0x7f0000002b80)=""/144, 0x90}, {&(0x7f0000002c40)=""/47, 0x2f}, {&(0x7f0000002c80)=""/225, 0xe1}, {&(0x7f0000002d80)=""/36, 0x24}], 0x5}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002ec0)=""/79, 0x4f}, {&(0x7f0000002f40)=""/233, 0xe9}, {&(0x7f0000003040)=""/100, 0x64}], 0x3, &(0x7f0000003100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000031c0)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003240)=""/65, 0x41}, {&(0x7f00000032c0)=""/254, 0xfe}], 0x2}}], 0x5, 0x40002000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000003600)={0x2, 0x2, &(0x7f0000003540)=[0x40, 0x40], &(0x7f0000003580)=[0xf7, 0x3, 0x0, 0x3, 0xeb59], &(0x7f00000035c0)=[0xf5, 0xfff, 0x6, 0x8000]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r3}) (async) 05:56:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x600200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x80) (async) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r3}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x600200) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r3}) (async) 05:56:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x4200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x181080) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0x5, r2}) 05:56:56 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 05:56:56 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 05:56:56 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) shmdt(r0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x3000003, 0x10, 0xffffffffffffffff, 0x82000000) 05:56:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x600200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x80) (async) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r3}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x600200) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000200)={r3}) (async) 05:56:57 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 05:56:57 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) shmdt(r0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x3000003, 0x10, 0xffffffffffffffff, 0x82000000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) (async) shmdt(r0) (async) shmdt(r0) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x3000003, 0x10, 0xffffffffffffffff, 0x82000000) (async) 05:56:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x4200) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x181080) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0x5, r2}) 05:56:57 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 05:56:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0582, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], 0xffffffff, 0x0, '\x00', 0x7, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x81, 0x2f0000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000100)={0x0, r4, r5, 0x0, 0x2}) 05:56:57 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0xff, &(0x7f0000000040)={[0x5d6]}, 0x8) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) clock_gettime(0x7, &(0x7f0000000080)) 05:56:57 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmget(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (async) 05:56:57 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) [ 1913.545541] Unknown ioctl -1069521750 05:56:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0582, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], 0xffffffff, 0x0, '\x00', 0x7, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x81, 0x2f0000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000100)={0x0, r4, r5, 0x0, 0x2}) 05:56:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r5, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB="b3bbcee040602a78456d4904965c83a30a626858fbbc2dcb8fbfb70dd5d7e8200b5047c817595640a2a2854a8e2c40f85622b3833b00e58af69a2c5867ec19386ba4bb6e908d59039763056de420e214acced9516ad6deac234eb1f983f7aaa517", @ANYRES32=r7, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r11, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r10, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000e40)={0x340, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0xfb, 0xfd, 0x20a}, {0x7, 0x2, 0x6, 0x9}, {0x6, 0x1, 0x1, 0x8}, {0x4, 0x2, 0x0, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x32}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x40000}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:57 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x419) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x22020, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',afid=0x000000000;000001,access=cVient,cacxe=mmap,privport,cache=fscach,access=user,access=any,f3cache,fowner=', @ANYRESDEC=0xee01, @ANYBLOB="2c646f6e745f686173682c6f626a5f726f6c653d2f6465762f76736f636b002c7375626a5f726f6c653d2b23ab5e272c646f6e745f6d6561737572652c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=/dev/vsock\x00,fsmagic=0x0000000000000009,uid<', @ANYRESDEC=0xee00, @ANYBLOB=',rootcontext=system_u,\x00']) 05:56:57 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) (async) 05:56:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0582, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], 0xffffffff, 0x0, '\x00', 0x7, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x81, 0x2f0000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000100)={0x0, r4, r5, 0x0, 0x2}) [ 1913.668063] Unknown ioctl -1069521750 05:56:57 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x419) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x22020, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',afid=0x000000000;000001,access=cVient,cacxe=mmap,privport,cache=fscach,access=user,access=any,f3cache,fowner=', @ANYRESDEC=0xee01, @ANYBLOB="2c646f6e745f686173682c6f626a5f726f6c653d2f6465762f76736f636b002c7375626a5f726f6c653d2b23ab5e272c646f6e745f6d6561737572652c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=/dev/vsock\x00,fsmagic=0x0000000000000009,uid<', @ANYRESDEC=0xee00, @ANYBLOB=',rootcontext=system_u,\x00']) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x419) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x22020, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',afid=0x000000000;000001,access=cVient,cacxe=mmap,privport,cache=fscach,access=user,access=any,f3cache,fowner=', @ANYRESDEC=0xee01, @ANYBLOB="2c646f6e745f686173682c6f626a5f726f6c653d2f6465762f76736f636b002c7375626a5f726f6c653d2b23ab5e272c646f6e745f6d6561737572652c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=/dev/vsock\x00,fsmagic=0x0000000000000009,uid<', @ANYRESDEC=0xee00, @ANYBLOB=',rootcontext=system_u,\x00']) (async) 05:56:57 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) (async) 05:56:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) [ 1913.750579] Unknown ioctl -1069521750 05:56:57 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x419) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 64) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (rerun: 64) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) shmget(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x22020, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',afid=0x000000000;000001,access=cVient,cacxe=mmap,privport,cache=fscach,access=user,access=any,f3cache,fowner=', @ANYRESDEC=0xee01, @ANYBLOB="2c646f6e745f686173682c6f626a5f726f6c653d2f6465762f76736f636b002c7375626a5f726f6c653d2b23ab5e272c646f6e745f6d6561737572652c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=/dev/vsock\x00,fsmagic=0x0000000000000009,uid<', @ANYRESDEC=0xee00, @ANYBLOB=',rootcontext=system_u,\x00']) 05:56:57 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0xff, &(0x7f0000000040)={[0x5d6]}, 0x8) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (async) clock_gettime(0x7, &(0x7f0000000080)) [ 1913.799647] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1913.826232] netlink: 492 bytes leftover after parsing attributes in process `syz-executor.2'. 05:56:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x488880, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000055c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000005600)={r9}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="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", @ANYBLOB="763941b68e78fe35b7d849597206c661dd83ca4d5e9f68ac1cdad97414a4f01e2bcbc2", @ANYRES32=r7, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003"], 0x208}}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r10, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000004c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000740)={&(0x7f0000000500)=[r3, r3, r2, r13, r3, r3, r2], &(0x7f0000000540)=[r11], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000140)=[r2, r3, 0x0], &(0x7f0000000380)=[0x0, r4, 0x0, r12, 0x0, 0x0, 0x0, 0x0, r14, 0x0], 0x3, 0x1}) 05:56:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) 05:56:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r5, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB="b3bbcee040602a78456d4904965c83a30a626858fbbc2dcb8fbfb70dd5d7e8200b5047c817595640a2a2854a8e2c40f85622b3833b00e58af69a2c5867ec19386ba4bb6e908d59039763056de420e214acced9516ad6deac234eb1f983f7aaa517", @ANYRES32=r7, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r11, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r10, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000e40)={0x340, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0xfb, 0xfd, 0x20a}, {0x7, 0x2, 0x6, 0x9}, {0x6, 0x1, 0x1, 0x8}, {0x4, 0x2, 0x0, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x32}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x40000}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r5, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB="b3bbcee040602a78456d4904965c83a30a626858fbbc2dcb8fbfb70dd5d7e8200b5047c817595640a2a2854a8e2c40f85622b3833b00e58af69a2c5867ec19386ba4bb6e908d59039763056de420e214acced9516ad6deac234eb1f983f7aaa517", @ANYRES32=r7, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r11, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r10, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000e40)={0x340, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0xfb, 0xfd, 0x20a}, {0x7, 0x2, 0x6, 0x9}, {0x6, 0x1, 0x1, 0x8}, {0x4, 0x2, 0x0, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x32}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x40000}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) [ 1913.860453] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. 05:56:57 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x229de8d2097edf5c) 05:56:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x488880, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000055c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000005600)={r9}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="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", @ANYBLOB="763941b68e78fe35b7d849597206c661dd83ca4d5e9f68ac1cdad97414a4f01e2bcbc2", @ANYRES32=r7, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003"], 0x208}}, 0x0) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r10, 0x0, 0x0) (async, rerun: 64) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5], 0x5, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000004c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000740)={&(0x7f0000000500)=[r3, r3, r2, r13, r3, r3, r2], &(0x7f0000000540)=[r11], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000140)=[r2, r3, 0x0], &(0x7f0000000380)=[0x0, r4, 0x0, r12, 0x0, 0x0, 0x0, 0x0, r14, 0x0], 0x3, 0x1}) 05:56:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) [ 1914.006176] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1914.023348] netlink: 492 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1914.035252] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. 05:56:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r5, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB="b3bbcee040602a78456d4904965c83a30a626858fbbc2dcb8fbfb70dd5d7e8200b5047c817595640a2a2854a8e2c40f85622b3833b00e58af69a2c5867ec19386ba4bb6e908d59039763056de420e214acced9516ad6deac234eb1f983f7aaa517", @ANYRES32=r7, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r11, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r10, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000e40)={0x340, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0xfb, 0xfd, 0x20a}, {0x7, 0x2, 0x6, 0x9}, {0x6, 0x1, 0x1, 0x8}, {0x4, 0x2, 0x0, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x32}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x40000}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r5, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB="b3bbcee040602a78456d4904965c83a30a626858fbbc2dcb8fbfb70dd5d7e8200b5047c817595640a2a2854a8e2c40f85622b3833b00e58af69a2c5867ec19386ba4bb6e908d59039763056de420e214acced9516ad6deac234eb1f983f7aaa517", @ANYRES32=r7, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r11, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r10, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000e40)={0x340, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0xfb, 0xfd, 0x20a}, {0x7, 0x2, 0x6, 0x9}, {0x6, 0x1, 0x1, 0x8}, {0x4, 0x2, 0x0, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x32}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x40000}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) 05:56:57 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x229de8d2097edf5c) 05:56:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x488880, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000055c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000005600)={r9}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="f9c70002d1f2c0498f890c8ecbf20448020cd090c0c3d228d431dc6f3c223f1b2859bb1f69e037969dfad33387c07411428dece4cf2fdf0b3768abd4fd707916f299c5e5519b1602fb9b28d91a65fdcd6fd3511f0c0ead17d6077950d6c41d2c073d209b9e1a17b051563a6813d5a81a6ea340ffdb5c7c1bb4eff21095cbded2b100bac24fa4a969c6a13fd52c1aed72f3bac6f2057d7f2d7e271943b2136240d1ee3297436b0000000000000003268ffd72b406283de91e2999aea9733e8f8cd7552d60c3bd74d959572ec86407d101555afd3847eecb95154f9f33ca162bb9a742ee24174741cb85546c9b9ab86b66c66d6ad8d2e995ea158f854cf4dfe7e837e4167bb73331bf94328d41b260b74b8249b0239f6e48b1591da8785bf00b19578fa49969ed5652f9fd0bfb25439eae01ea6433a602c3d96a5b4e09145b08403dbadd807e17d274fff3", @ANYBLOB="763941b68e78fe35b7d849597206c661dd83ca4d5e9f68ac1cdad97414a4f01e2bcbc2", @ANYRES32=r7, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003"], 0x208}}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r10, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000004c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000740)={&(0x7f0000000500)=[r3, r3, r2, r13, r3, r3, r2], &(0x7f0000000540)=[r11], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000140)=[r2, r3, 0x0], &(0x7f0000000380)=[0x0, r4, 0x0, r12, 0x0, 0x0, 0x0, 0x0, r14, 0x0], 0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x488880, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000055c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000005600)={r9}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="f9c70002d1f2c0498f890c8ecbf20448020cd090c0c3d228d431dc6f3c223f1b2859bb1f69e037969dfad33387c07411428dece4cf2fdf0b3768abd4fd707916f299c5e5519b1602fb9b28d91a65fdcd6fd3511f0c0ead17d6077950d6c41d2c073d209b9e1a17b051563a6813d5a81a6ea340ffdb5c7c1bb4eff21095cbded2b100bac24fa4a969c6a13fd52c1aed72f3bac6f2057d7f2d7e271943b2136240d1ee3297436b0000000000000003268ffd72b406283de91e2999aea9733e8f8cd7552d60c3bd74d959572ec86407d101555afd3847eecb95154f9f33ca162bb9a742ee24174741cb85546c9b9ab86b66c66d6ad8d2e995ea158f854cf4dfe7e837e4167bb73331bf94328d41b260b74b8249b0239f6e48b1591da8785bf00b19578fa49969ed5652f9fd0bfb25439eae01ea6433a602c3d96a5b4e09145b08403dbadd807e17d274fff3", @ANYBLOB="763941b68e78fe35b7d849597206c661dd83ca4d5e9f68ac1cdad97414a4f01e2bcbc2", @ANYRES32=r7, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003"], 0x208}}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r10, 0x0, 0x0) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5], 0x5, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000004c0)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000740)={&(0x7f0000000500)=[r3, r3, r2, r13, r3, r3, r2], &(0x7f0000000540)=[r11], 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x1, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000140)=[r2, r3, 0x0], &(0x7f0000000380)=[0x0, r4, 0x0, r12, 0x0, 0x0, 0x0, 0x0, r14, 0x0], 0x3, 0x1}) (async) 05:56:57 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x229de8d2097edf5c) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffa000/0x2000)=nil) (async) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x229de8d2097edf5c) (async) 05:56:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}], 0x10000, 0x0, '\x00', 0x3, 0x1}) 05:56:57 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0xff, &(0x7f0000000040)={[0x5d6]}, 0x8) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (async) clock_gettime(0x7, &(0x7f0000000080)) 05:56:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}], 0x10000, 0x0, '\x00', 0x3, 0x1}) 05:56:57 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x2c000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x40000) mmap$snddsp_status(&(0x7f0000ff3000/0xc000)=nil, 0x1000, 0x0, 0x40010, r1, 0x82000000) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0xdd8) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x8a000) [ 1914.212083] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. 05:56:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000140)={0x8, 0x6, &(0x7f0000000040)=[0x101, 0x7, 0x7fff, 0x5, 0x8, 0xfe00], &(0x7f0000000080)=[0x6a, 0x1], &(0x7f0000000100)=[0x67cc, 0x5, 0x1, 0x6]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) [ 1914.263851] netlink: 492 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1914.293758] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. 05:56:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x805, 0x203, 0xffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) 05:56:58 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x2c000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x40000) mmap$snddsp_status(&(0x7f0000ff3000/0xc000)=nil, 0x1000, 0x0, 0x40010, r1, 0x82000000) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0xdd8) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x8a000) shmget$private(0x0, 0x3000, 0x2c000000, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x40000) (async) mmap$snddsp_status(&(0x7f0000ff3000/0xc000)=nil, 0x1000, 0x0, 0x40010, r1, 0x82000000) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0xdd8) (async) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x8a000) (async) 05:56:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}], 0x10000, 0x0, '\x00', 0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x200, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}], 0x10000, 0x0, '\x00', 0x3, 0x1}) (async) 05:56:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000140)={0x8, 0x6, &(0x7f0000000040)=[0x101, 0x7, 0x7fff, 0x5, 0x8, 0xfe00], &(0x7f0000000080)=[0x6a, 0x1], &(0x7f0000000100)=[0x67cc, 0x5, 0x1, 0x6]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000140)={0x8, 0x6, &(0x7f0000000040)=[0x101, 0x7, 0x7fff, 0x5, 0x8, 0xfe00], &(0x7f0000000080)=[0x6a, 0x1], &(0x7f0000000100)=[0x67cc, 0x5, 0x1, 0x6]}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) (async) 05:56:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r2, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/119, 0x77}], 0x6, &(0x7f0000000580)=""/31, 0x1f}, 0x40000000) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000002340)=ANY=[@ANYBLOB="cd0e960f2a18831171e4ac48e9783b9dfc432287e8d3f7d46d0deb48cf152bb4342811ac6841faa5c658ec25000000f9818209f08821bcfedcc42a4f12b207e3c9b0946111e2fef713629fa2968c3f11693293153c713c6630d004e07caddc97a17b4038b884fa41c373a709510ea5e3a261b1e4dfe0f80e0c62ad2e277bd3957ebf7d0bfbce0b795ab4f6fd5ce6399019a45b25bcd5925c817587f7d8c75bd70000ddd33735", @ANYRES16=0x0, @ANYBLOB="00022dbd7000010100000000000008000100", @ANYRES32=r1, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="9979b00523aea55d1e544a1e06d69570a43d4d58195169329a52de63b9fbb105d2c08842da9b8effb35814dd578749a1dd58bfc568acd83d9eaa49048159c3c12f33e364456e3bcd172072367baf83e72fae7aefa2a594fb889f58c9dcf7b073c9874d0990e3cd4b18c0892269d52f56ac6c983158193704c3de475fd16a209b00d715eff91f630de20e673c2c05ae2a4f77a9d23a6c69a21f7753ffdabb77a34c05c3a159f302c28f207ba667bc343d726c96dc152e86f1c1478cd084ee7d20cc000000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4010}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e46120b0211dcb72", @ANYRES16=r6, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r5, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f00000007c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/73, 0x49}, {&(0x7f0000000940)=""/3, 0x3}, {&(0x7f0000000980)=""/6, 0x6}, {&(0x7f00000009c0)=""/217, 0xd9}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/198, 0xc6}, {&(0x7f0000001bc0)=""/89, 0x59}, {&(0x7f0000001c40)=""/142, 0x8e}, {&(0x7f0000001d00)=""/61, 0x3d}], 0xa, &(0x7f0000001e00)=""/32, 0x20}, 0x12000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="08020000", @ANYRES16=r10, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r9, @ANYBLOB="34de6d4cca00010024dfcc8a3059979a24f2b60000000000000000625f73746174735f726566726573685f696e74657276616c0000080004306ed829188fbd698b7d416a1a0d3d6f9975ca0df737c75dbe6340bb791500"/97], 0x208}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000000040), 0xc, &(0x7f0000001e80)={&(0x7f00000025c0)=ANY=[@ANYBLOB="f0070000", @ANYRES16=0x0, @ANYBLOB="040825bd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="ac01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="380001002400187274000000000000000000000000000000000000000000000500030003000000080004007a7a51a13597ab3efa768b6c1a5502539d4ccce5458aa1ad2f541bd67e2374d13e1d35b0120ebe59c2d78e62faeb2b0c2cb175c8f7a7d031f4d1a83c174c4cc57415ca5aa7996721fcfb5bb081755b1bdfc850935d7acd0efc5b3b8ed5179cffb8b8b6738b5399887a9edb17f862b6ac236133164649b480a365958db8255cec3f91013d000000000000000000", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000008000100", @ANYRES32=r1, @ANYBLOB="f400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400e987163c40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000001000008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="cc0102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000121000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="780002805100010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400a900080008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b40002803c000100a1fd0100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006c625f74785f000000000000000000000000050003000500000009000400686173680000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500040001040000080001000000000000000000", @ANYRES32=r7, @ANYBLOB="04000280"], 0x7f0}, 0x1, 0x0, 0x0, 0x894}, 0x8080) r11 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r11, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r11, &(0x7f0000ffc000/0x4000)=nil, 0x1800) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 05:56:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x805, 0x203, 0xffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x805, 0x203, 0xffffffff}) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) (async) [ 1914.470114] ================================================================== [ 1914.477667] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x200/0x210 [ 1914.484674] Read of size 8 at addr ffff88809c288640 by task syz-executor.0/16078 [ 1914.492198] [ 1914.493821] CPU: 0 PID: 16078 Comm: syz-executor.0 Not tainted 4.14.257-syzkaller #0 [ 1914.501698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1914.511046] Call Trace: [ 1914.513632] dump_stack+0x1b2/0x281 05:56:58 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x2c000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x40000) mmap$snddsp_status(&(0x7f0000ff3000/0xc000)=nil, 0x1000, 0x0, 0x40010, r1, 0x82000000) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0xdd8) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x8a000) 05:56:58 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) [ 1914.517295] print_address_description.cold+0x54/0x1d3 [ 1914.522572] kasan_report_error.cold+0x8a/0x191 [ 1914.527247] ? vgem_gem_dumb_create+0x200/0x210 [ 1914.531915] __asan_report_load8_noabort+0x68/0x70 [ 1914.536848] ? vgem_gem_dumb_create+0x200/0x210 [ 1914.541521] vgem_gem_dumb_create+0x200/0x210 [ 1914.546022] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1914.551040] ? __drm_printfn_debug+0x70/0x70 [ 1914.555446] drm_ioctl_kernel+0x14c/0x200 [ 1914.559599] drm_ioctl+0x42e/0x890 [ 1914.563142] ? __drm_printfn_debug+0x70/0x70 05:56:58 executing program 5: r0 = shmget(0x3, 0x1000, 0x243, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r5, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002340)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f0000002440)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000026c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002680)={&(0x7f0000002480)={0x1e0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) 05:56:58 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) 05:56:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x805, 0x203, 0xffffffff}) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)) [ 1914.567547] ? drm_getstats+0x20/0x20 [ 1914.571351] ? trace_hardirqs_on+0x10/0x10 [ 1914.575592] ? drm_getstats+0x20/0x20 [ 1914.579397] do_vfs_ioctl+0x75a/0xff0 [ 1914.583196] ? lock_acquire+0x170/0x3f0 [ 1914.587167] ? ioctl_preallocate+0x1a0/0x1a0 [ 1914.591576] ? __fget+0x2df/0x460 [ 1914.595028] ? do_vfs_ioctl+0xff0/0xff0 [ 1914.599001] ? security_file_ioctl+0x83/0xb0 [ 1914.603412] SyS_ioctl+0x7f/0xb0 [ 1914.606775] ? do_vfs_ioctl+0xff0/0xff0 [ 1914.610748] do_syscall_64+0x1d5/0x640 [ 1914.614642] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1914.619825] RIP: 0033:0x7ff6098aae99 [ 1914.623526] RSP: 002b:00007ff6081ff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1914.631228] RAX: ffffffffffffffda RBX: 00007ff6099be030 RCX: 00007ff6098aae99 [ 1914.638492] RDX: 00000000200001c0 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1914.645759] RBP: 00007ff609905031 R08: 0000000000000000 R09: 0000000000000000 [ 1914.653022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1914.660283] R13: 00007ffc7d87969f R14: 00007ff6081ff300 R15: 0000000000022000 [ 1914.667559] 05:56:58 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) 05:56:58 executing program 5: r0 = shmget(0x3, 0x1000, 0x243, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200182, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r5, @ANYBLOB="01000000000002dcdf250100000008000100", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002340)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f0000002440)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000026c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002680)={&(0x7f0000002480)={0x1e0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) (async) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) [ 1914.668392] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1914.669174] Allocated by task 16078: [ 1914.669188] kasan_kmalloc+0xeb/0x160 [ 1914.669197] kmem_cache_alloc_trace+0x131/0x3d0 [ 1914.669207] __vgem_gem_create+0x44/0xe0 [ 1914.694036] vgem_gem_dumb_create+0xc5/0x210 [ 1914.698445] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1914.703458] drm_ioctl_kernel+0x14c/0x200 [ 1914.707618] drm_ioctl+0x42e/0x890 [ 1914.711152] do_vfs_ioctl+0x75a/0xff0 [ 1914.714947] SyS_ioctl+0x7f/0xb0 [ 1914.718313] do_syscall_64+0x1d5/0x640 [ 1914.722192] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1914.727370] [ 1914.728994] Freed by task 16078: [ 1914.732357] kasan_slab_free+0xc3/0x1a0 [ 1914.736325] kfree+0xc9/0x250 [ 1914.739424] drm_gem_object_free+0x8f/0x150 [ 1914.743738] drm_gem_object_put_unlocked+0xc3/0x160 [ 1914.748776] vgem_gem_dumb_create+0xf2/0x210 [ 1914.753181] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1914.758194] drm_ioctl_kernel+0x14c/0x200 [ 1914.762334] drm_ioctl+0x42e/0x890 [ 1914.765866] do_vfs_ioctl+0x75a/0xff0 [ 1914.769658] SyS_ioctl+0x7f/0xb0 [ 1914.773019] do_syscall_64+0x1d5/0x640 [ 1914.776904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1914.782080] [ 1914.783699] The buggy address belongs to the object at ffff88809c288540 [ 1914.783699] which belongs to the cache kmalloc-512 of size 512 [ 1914.796443] The buggy address is located 256 bytes inside of [ 1914.796443] 512-byte region [ffff88809c288540, ffff88809c288740) [ 1914.808316] The buggy address belongs to the page: 05:56:58 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08020000", @ANYRES16=r2, @ANYBLOB="01d200000000000200"/19, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x4, 0x4, 0x8, 0x8, 0x26, @dev={0xfe, 0x80, '\x00', 0x27}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1, 0x7800, 0x2, 0x9}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="08020000", @ANYRES16=r7, @ANYBLOB="01000000000002dc35f39ca2cd5c00000000010000000800", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08020000", @ANYRES16=r10, @ANYBLOB="0106000000dc7730af08d095645cd7", @ANYBLOB, @ANYRES32=r9, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004"], 0x208}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000800)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000002100)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x28, 0xa55, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x4, 0x1}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000880)={0x7ec, r7, 0x55ab4b958ed7c883, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x387}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x401, 0x4f, 0x1, 0x1}, {0x2, 0x7, 0xff, 0x9}, {0x1f, 0x40, 0x3, 0x7ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x344}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x7ec}, 0x1, 0x0, 0x0, 0xc040}, 0x0) [ 1914.813246] page:ffffea000270a200 count:1 mapcount:0 mapping:ffff88809c288040 index:0xffff88809c288040 [ 1914.822688] flags: 0xfff00000000100(slab) [ 1914.826837] raw: 00fff00000000100 ffff88809c288040 ffff88809c288040 0000000100000005 [ 1914.834717] raw: ffffea0002a6bae0 ffffea0002421f60 ffff88813fe74940 0000000000000000 [ 1914.842595] page dumped because: kasan: bad access detected [ 1914.848296] [ 1914.849915] Memory state around the buggy address: [ 1914.854835] ffff88809c288500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1914.862187] ffff88809c288580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1914.869539] >ffff88809c288600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1914.876979] ^ [ 1914.882424] ffff88809c288680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1914.889788] ffff88809c288700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1914.897142] ================================================================== [ 1914.904493] Disabling lock debugging due to kernel taint [ 1914.912770] Kernel panic - not syncing: panic_on_warn set ... [ 1914.912770] [ 1914.920218] CPU: 0 PID: 16078 Comm: syz-executor.0 Tainted: G B 4.14.257-syzkaller #0 [ 1914.929300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1914.938643] Call Trace: [ 1914.941232] dump_stack+0x1b2/0x281 [ 1914.944846] panic+0x1f9/0x42d [ 1914.948017] ? add_taint.cold+0x16/0x16 [ 1914.951980] ? ___preempt_schedule+0x16/0x18 [ 1914.956367] kasan_end_report+0x43/0x49 [ 1914.960316] kasan_report_error.cold+0xa7/0x191 [ 1914.964976] ? vgem_gem_dumb_create+0x200/0x210 [ 1914.969674] __asan_report_load8_noabort+0x68/0x70 [ 1914.974578] ? vgem_gem_dumb_create+0x200/0x210 [ 1914.979221] vgem_gem_dumb_create+0x200/0x210 [ 1914.983695] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1914.988690] ? __drm_printfn_debug+0x70/0x70 [ 1914.993076] drm_ioctl_kernel+0x14c/0x200 [ 1914.997200] drm_ioctl+0x42e/0x890 [ 1915.000715] ? __drm_printfn_debug+0x70/0x70 [ 1915.005095] ? drm_getstats+0x20/0x20 [ 1915.008873] ? trace_hardirqs_on+0x10/0x10 [ 1915.013081] ? drm_getstats+0x20/0x20 [ 1915.017029] do_vfs_ioctl+0x75a/0xff0 [ 1915.020807] ? lock_acquire+0x170/0x3f0 [ 1915.024755] ? ioctl_preallocate+0x1a0/0x1a0 [ 1915.029523] ? __fget+0x2df/0x460 [ 1915.032959] ? do_vfs_ioctl+0xff0/0xff0 [ 1915.036911] ? security_file_ioctl+0x83/0xb0 [ 1915.041305] SyS_ioctl+0x7f/0xb0 [ 1915.044650] ? do_vfs_ioctl+0xff0/0xff0 [ 1915.048606] do_syscall_64+0x1d5/0x640 [ 1915.052477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1915.057646] RIP: 0033:0x7ff6098aae99 [ 1915.061344] RSP: 002b:00007ff6081ff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1915.069025] RAX: ffffffffffffffda RBX: 00007ff6099be030 RCX: 00007ff6098aae99 [ 1915.076267] RDX: 00000000200001c0 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1915.083511] RBP: 00007ff609905031 R08: 0000000000000000 R09: 0000000000000000 [ 1915.090754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1915.098084] R13: 00007ffc7d87969f R14: 00007ff6081ff300 R15: 0000000000022000 [ 1915.105615] Kernel Offset: disabled [ 1915.109243] Rebooting in 86400 seconds..