0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8911, &(0x7f0000000100)=@buf={0x8b, &(0x7f0000000040)="c1d91209f8e148cc0fc3b088db856d8acdc1fd4bbd1a36a1fc5bc3ba3e422da8e484824c34558692e871c8b0eddb90b790755767fc532f10ecfa37cac06a4c5e015500c039ca15c685bb063b4ead173a0b30472da0061c70fa2e87a74e5797bcfb0eebe19a260c9ad486f6f295b687acb2ec2845c3b0eb03ac27f35e3bdfc5c961dfedf09c57afc31633c2"}) 00:53:03 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:03 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) 00:53:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x3, 0x84000}) 00:53:03 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) 00:53:03 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:53:03 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x8b8e55a0bc3f3046}, 0x4008004) ioctl$sock_SIOCGIFCONF(r0, 0x891d, &(0x7f0000000380)) 00:53:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x84000}) 00:53:03 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) 00:53:03 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:03 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:03 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 00:53:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x5}) 00:53:03 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:03 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) 00:53:03 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 00:53:03 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:03 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x8b8e55a0bc3f3046}, 0x4008004) 00:53:04 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) 00:53:04 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:04 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 00:53:04 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:04 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) 00:53:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 00:53:04 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:04 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 00:53:04 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) 00:53:04 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 00:53:04 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:04 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:04 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)) 00:53:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) 00:53:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:04 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)) 00:53:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) 00:53:04 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) 00:53:04 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:04 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:04 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:04 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:04 executing program 5: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:53:05 executing program 5: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 5: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x3, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:05 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:53:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 00:53:05 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:53:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 1: r0 = epoll_create(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 00:53:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 1: r0 = epoll_create(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x0, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 00:53:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 1: r0 = epoll_create(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x0, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 1: epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x0, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 1: epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 1: epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 2: r0 = epoll_create(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:05 executing program 2: r0 = epoll_create(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:05 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:06 executing program 2: r0 = epoll_create(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:06 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:06 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 2: epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:06 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:06 executing program 2: epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 0: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:06 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:53:06 executing program 0: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 2: epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:53:06 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 0: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:06 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:53:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:06 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x0, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x0, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:06 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 00:53:06 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x0, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:06 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:06 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) 00:53:07 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:07 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 00:53:07 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:07 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x0, @raw_data="524c7faeab2ee0473de584510e786de8da4718e9159c97521c226c4d01e536bbd4aae83cf8b5a665240d9e33ddc6c1f07e3801eb2e04663418acf98effa82c5bfb5cde84b7244bde9b665f436c3efbe8227f974c427993acc9d49b214238786313eb0e80ea49ae1a0246a3ef663aecd98f60ddec87bdf5eab78740af667c7705e84ceac02892d14d9edcd582b3b5b372f6f13c67895009662d5bf2ec2b3d591d50f24661d0dbc71ef7977a2a09d08952fb1fc80c7974f0ea20adb06098df5cf2d5c964ca20ae8898"}) 00:53:07 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:07 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) 00:53:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:07 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) 00:53:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 00:53:07 executing program 1: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, 0x0, 0x0) 00:53:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 00:53:07 executing program 2: r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, 0x0, 0x0) 00:53:07 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="d2722b49aba4e3f46fbacaee211fe866646b80f02ec99896f995b994f1e69f3725d089f22919ae7ca73a25edd3d66dab5110c50af6b6fc848dddd579a71d8fe5a8288d10cdf0cffbc119e19deec3ca3049c4601f63a42c1302dd1a16aad454937b70ba38b7a95f712209b3102c29268e1c4f00b9edc77e32896f037823e0fb247c06ff137d4c1af686f26ceacad5be2583f11a58912c8d6e3ebf53f00ad88b4f5c6e3199b8dea8751a3e5332c77e94a2ed5f1184be648a2a0d66f5c5f2944e651d08812b04a4b1d2"}) 00:53:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 00:53:07 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x40a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x81, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x800000000000, r2}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0x4df, r2}) 00:53:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) 00:53:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 00:53:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x3540, &(0x7f0000000000)={0x0, 0x699, 0x20, 0x3, 0x3d5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x73d3, &(0x7f0000000100)={0x0, 0x6efc, 0x8, 0x1, 0x8c, 0x0, r1}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$sock_SIOCGIFCONF(r0, 0x8911, &(0x7f0000000380)) 00:53:07 executing program 2: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x9, 0x1, 0x4, 0x1, 0x1f, {0x0, 0xea60}, {0x4, 0x1, 0x2, 0x0, 0x6, 0x2, "07faf107"}, 0x8, 0x1, @offset=0x7, 0x5, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x400200) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x9, 0x6, 0x4, 0x1, 0xf3, {}, {0x2, 0xc, 0x8f, 0xc5, 0x81, 0x2, '2v|\"'}, 0x3ff, 0x4, @planes=&(0x7f0000000040)={0x63, 0xcc3, @userptr=0x3f, 0xe00a}, 0x8, 0x0, r0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xe740, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000280)) 00:53:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 00:53:07 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x48000, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r1, 0x0, 0xffffffffffffff06) 00:53:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) 00:53:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x240080) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef00faba20e00000066ba4300ecc4e17de68cbc000000800f0666ba420066b8000066ef266066baf80cb83c26e386ef66bafc0cec0ffa090f20d835080000000f22d8b9800000c00f3235008000000f30", 0x51}], 0x1, 0x2d, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}], 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8911, &(0x7f0000000380)) 00:53:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={r1}) 00:53:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={r1}) 00:53:07 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x1a1501) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3d, 0x40) 00:53:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x891e, &(0x7f0000000380)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dd91a79f023033c9060620"], 0x2c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x48}, 0x1, 0x0, 0x0, 0xd1}, 0x80) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bridge\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4091) 00:53:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x60a003, 0x0) 00:53:07 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) write$6lowpan_enable(r4, 0x0, 0x0) recvfrom$packet(r4, &(0x7f00000000c0)=""/41, 0x29, 0x0, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000280)) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) 00:53:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={r1}) 00:53:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={r1}) 00:53:07 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) write$6lowpan_enable(r4, 0x0, 0x0) recvfrom$packet(r4, &(0x7f00000000c0)=""/41, 0x29, 0x0, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000280)) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) 00:53:07 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) write$6lowpan_enable(r4, 0x0, 0x0) recvfrom$packet(r4, &(0x7f00000000c0)=""/41, 0x29, 0x0, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000280)) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) 00:53:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={r1}) 00:53:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x240080) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef00faba20e00000066ba4300ecc4e17de68cbc000000800f0666ba420066b8000066ef266066baf80cb83c26e386ef66bafc0cec0ffa090f20d835080000000f22d8b9800000c00f3235008000000f30", 0x51}], 0x1, 0x2d, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}], 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8911, &(0x7f0000000380)) 00:53:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:08 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) write$6lowpan_enable(r4, 0x0, 0x0) recvfrom$packet(r4, &(0x7f00000000c0)=""/41, 0x29, 0x0, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000280)) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) 00:53:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={r1}) 00:53:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x22000) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)={0x1}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000300)={0x10200, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dri/renderD128\x00', 0x22282, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000280)) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x0, 0x70, 0x7}, 0x6) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x612c02, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r3}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x224400, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000380)={0x1, @raw_data="b0371d465d0e5870faeff6ca443fd357f03279c84e015c7607b2514a550dd328f7f4cfbba2f942fb34ed9ab018070a09f6112eb4e53f124b5cc7ddaf9271faee6f97af3b044df08c7e4830c339f6de4afd8dfee5ee0bf9326aa25d3d367e431176a3e01bb381ddd381f5475f35875562647efc76bf74c8aa3e14d1fe09e96f0515bd60e4778142714bdf7258e3b95d226f904f2e71d0b274fb87eb927d925102973528eecee940436bb1baae92fd3b03dbbec87b365582f0ef3fa13674ca9318ff360e6ad7a2341e"}) 00:53:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)) 00:53:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:08 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) write$6lowpan_enable(r4, 0x0, 0x0) recvfrom$packet(r4, &(0x7f00000000c0)=""/41, 0x29, 0x0, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000280)) 00:53:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)) 00:53:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x891d, &(0x7f0000000380)=@req={0xa000000}) 00:53:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:08 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) 00:53:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x240080) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef00faba20e00000066ba4300ecc4e17de68cbc000000800f0666ba420066b8000066ef266066baf80cb83c26e386ef66bafc0cec0ffa090f20d835080000000f22d8b9800000c00f3235008000000f30", 0x51}], 0x1, 0x2d, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}], 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8911, &(0x7f0000000380)) 00:53:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x891e, &(0x7f0000000380)=@req={0x9000000}) 00:53:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:09 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) 00:53:09 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) write$6lowpan_enable(r4, 0x0, 0x0) recvfrom$packet(r4, &(0x7f00000000c0)=""/41, 0x29, 0x0, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) 00:53:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:09 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) write$6lowpan_enable(r4, 0x0, 0x0) 00:53:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:09 executing program 2: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:09 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) 00:53:09 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x400, 0xfffffffb, 0x7fffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)) io_uring_setup(0x2cdf, &(0x7f0000000100)={0x0, 0x437c, 0x2, 0x1, 0x330, 0x0, r1}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000080)=0x10000) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 00:53:09 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) 00:53:09 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x240080) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef00faba20e00000066ba4300ecc4e17de68cbc000000800f0666ba420066b8000066ef266066baf80cb83c26e386ef66bafc0cec0ffa090f20d835080000000f22d8b9800000c00f3235008000000f30", 0x51}], 0x1, 0x2d, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}], 0x1) 00:53:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:09 executing program 2: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:09 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)) 00:53:09 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) 00:53:09 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) 00:53:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:10 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) 00:53:10 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000002c0)) write$6lowpan_enable(r4, 0x0, 0x0) 00:53:10 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)) 00:53:10 executing program 2: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x5, 0x3, 0xa, 0x8, 0xc, 0x4}, @alu={0x7, 0x0, 0x7, 0x9, 0x5, 0x24da48eb6a1ed475, 0x8}], &(0x7f0000000040)='GPL\x00', 0x1000, 0xf0, &(0x7f0000000180)=""/240, 0x40f00, 0x0, [], 0x0, 0x19, r2, 0x8, &(0x7f0000000080)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x3, 0x8001}, 0x10, 0x105a2, r3}, 0x78) 00:53:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x240080) 00:53:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:10 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:10 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)) 00:53:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000200)="c507297f5e96ebc83031fd532d067a7335f348d249baeecb1cc42ad6f73233fd042f71fc25dd88c9693e24135b51e6ea149309b3244723c5b3a1561878c50311b7e7f45d1108ebf7430451cb8f6bda9981dcbd29e91a5e94ca91645987912ca26a558ad850dcba6070f0528e208ba012429a75328082a6c159e01d9c845aa32a75e2523885aa9e4b9013f171b028b689440ea2922e01f145d7ef753117a745bc8ae9fd5b", 0xa4) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:10 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) 00:53:10 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000200)="c507297f5e96ebc83031fd532d067a7335f348d249baeecb1cc42ad6f73233fd042f71fc25dd88c9693e24135b51e6ea149309b3244723c5b3a1561878c50311b7e7f45d1108ebf7430451cb8f6bda9981dcbd29e91a5e94ca91645987912ca26a558ad850dcba6070f0528e208ba012429a75328082a6c159e01d9c845aa32a75e2523885aa9e4b9013f171b028b689440ea2922e01f145d7ef753117a745bc8ae9fd5b", 0xa4) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:10 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) 00:53:10 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x8000000) 00:53:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000200)="c507297f5e96ebc83031fd532d067a7335f348d249baeecb1cc42ad6f73233fd042f71fc25dd88c9693e24135b51e6ea149309b3244723c5b3a1561878c50311b7e7f45d1108ebf7430451cb8f6bda9981dcbd29e91a5e94ca91645987912ca26a558ad850dcba6070f0528e208ba012429a75328082a6c159e01d9c845aa32a75e2523885aa9e4b9013f171b028b689440ea2922e01f145d7ef753117a745bc8ae9fd5b", 0xa4) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:11 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:11 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:11 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, 0xffffffffffffffff, 0x8000000) 00:53:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000200)="c507297f5e96ebc83031fd532d067a7335f348d249baeecb1cc42ad6f73233fd042f71fc25dd88c9693e24135b51e6ea149309b3244723c5b3a1561878c50311b7e7f45d1108ebf7430451cb8f6bda9981dcbd29e91a5e94ca91645987912ca26a558ad850dcba6070f0528e208ba012429a75328082a6c159e01d9c845aa32a75e2523885aa9e4b9013f171b028b689440ea2922e01f145d7ef753117a745bc8ae9fd5b", 0xa4) 00:53:11 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) 00:53:11 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) 00:53:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:11 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, 0xffffffffffffffff, 0x8000000) 00:53:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) 00:53:11 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 00:53:12 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) 00:53:12 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, 0xffffffffffffffff, 0x8000000) 00:53:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 00:53:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:12 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 00:53:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:12 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="ef4615058516b8833fd78b2a891efa3239e79082f1e923fce6b0cb1c66863617af1b7589e259f6f5f97619434a9608090013889f4672bd7092960cf5e1b24e6ce6465e36df50e3a7db6ae86d202ea6734ddda13b33ca670506501f446a83fb856515257fa9da794bf9defc8430aad2041d549d078ac5fbdd21c98f14877002ec873315615abf20ecdd9417fb3b8ab967a6e2d4c4e2f7a0a3a1910cdf0f6dd16a9950b071d9f33d6160163f9e72371ce8268e560270ffa672dac27f5bc4f3a8734846f04ca2bcf7d6d2822a7c49102a9df2e8da728657494be3c41b9b7c09adeecffa5b321ac8e1aea494e6", 0xeb}) 00:53:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:12 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r1, 0x8000000) 00:53:12 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) 00:53:12 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x240080) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef00faba20e00000066ba4300ecc4e17de68cbc000000800f0666ba420066b8000066ef266066baf80cb83c26e386ef66bafc0cec0ffa090f20d835080000000f22d8b9800000c00f3235008000000f30", 0x51}], 0x1, 0x2d, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}], 0x1) 00:53:12 executing program 1: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:12 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r1, 0x8000000) 00:53:12 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) 00:53:12 executing program 1: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:12 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r1, 0x8000000) 00:53:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) 00:53:12 executing program 1: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:12 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:13 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x240080) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef00faba20e00000066ba4300ecc4e17de68cbc000000800f0666ba420066b8000066ef266066baf80cb83c26e386ef66bafc0cec0ffa090f20d835080000000f22d8b9800000c00f3235008000000f30", 0x51}], 0x1, 0x2d, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}], 0x1) 00:53:13 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:13 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:13 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:13 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r1, 0x8000000) 00:53:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={0x0}) 00:53:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:13 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:13 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:13 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x8000000) 00:53:13 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x240080) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef00faba20e00000066ba4300ecc4e17de68cbc000000800f0666ba420066b8000066ef266066baf80cb83c26e386ef66bafc0cec0ffa090f20d835080000000f22d8b9800000c00f3235008000000f30", 0x51}], 0x1, 0x2d, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}], 0x1) 00:53:13 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:13 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:13 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x240080) 00:53:14 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:14 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa8002, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x8000000) 00:53:14 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:14 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:14 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x8000000) 00:53:14 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:14 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:14 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:14 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:14 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:14 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:14 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x8000000) 00:53:14 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:14 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:15 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) 00:53:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:15 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x8000000) 00:53:15 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:15 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:15 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x8000000) 00:53:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) 00:53:15 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:15 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:15 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:15 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x8000000) 00:53:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) 00:53:15 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:15 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000) 00:53:15 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:15 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x1f}) 00:53:16 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:16 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) 00:53:16 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4, 0x4, 0x0, 0x1f}) 00:53:16 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x4, 0x0, 0x1f}) 00:53:16 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) 00:53:16 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:16 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:16 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) 00:53:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f}) 00:53:16 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:16 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:16 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) 00:53:17 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:17 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 00:53:17 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) 00:53:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:17 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) 00:53:17 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:17 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:17 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:17 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:17 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:17 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:17 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:17 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:17 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:17 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:17 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:18 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:18 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:18 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:18 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:18 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) [ 894.143726][ T7] Bluetooth: hci5: command 0x0405 tx timeout 00:53:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:18 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:18 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) epoll_create(0x7) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:19 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={[], 0x10}}, 0x8) 00:53:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:19 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:19 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:20 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:20 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:20 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:20 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:20 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:20 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:20 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:20 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:20 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:20 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:21 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:21 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed}, 0x8) 00:53:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:21 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 00:53:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006031feb29aa71de36010fb249c624e69f0ba5117a2fbec130bc454df34f0528fc003a0ccad11773917427579708b614016d5a4fb38d961c94789f325a23306c09f7740d4bf454dbb837a97de2d64bcb072ebb907b04f180f3481bc1ff1b94506ca0194eb191a752e9dd2f46da24d5f6165c58e3352b732512214fefa6511c631739d5eb2cd4466128c50df0fad3a1808dd32cf9a4ec2057aa9e8365bb6b27780d0eff860d9f7e5002873b8b8f8ed2ce0f51bef2bc9f0cae169abd2d7f6476020197ff493ca2dd0020d005f8a3fa02d344fe5ca02f7c828af18b8817f348906b420692a5a280ddd8aa01517a0ef300f90d29ebbf403", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25020000000c0016000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:21 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x244000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000002c0)={r2, 0x3}) prctl$PR_CAPBSET_READ(0x17, 0xd) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) 00:53:21 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:21 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000001c0)={0x3b}) 00:53:21 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000001c0)={0x3b}) 00:53:21 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) socket$isdn(0x22, 0x3, 0x25) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000040)="f6e6fb018000002a49ebfd0f82b5a27f11edde99bde743afa8e525ea4fe5d5714be8fdc71c6bc794847479ded1d4f712830875c6ff11d3e40000", 0x3a) 00:53:21 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000001c0)={0x3b}) 00:53:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:22 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:22 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000001c0)={0x3b}) 00:53:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:22 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000001c0)={0x3b}) 00:53:22 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+60000}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd=r6, 0x0, 0x0, r2}) write$6lowpan_enable(r2, 0x0, 0x0) accept4(r2, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x80, 0x0) 00:53:22 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:22 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000001c0)={0x3b}) 00:53:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0x0, r1}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x7) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:22 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+60000}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd=r6, 0x0, 0x0, r2}) write$6lowpan_enable(r2, 0x0, 0x0) accept4(r2, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x80, 0x0) 00:53:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:22 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:22 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0x0, r1}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x7) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:22 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3}) 00:53:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:22 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 00:53:22 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+60000}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd=r6, 0x0, 0x0, r2}) write$6lowpan_enable(r2, 0x0, 0x0) accept4(r2, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x80, 0x0) 00:53:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:22 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0x0, r1}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x7) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:22 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+60000}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd=r6, 0x0, 0x0, r2}) write$6lowpan_enable(r2, 0x0, 0x0) 00:53:22 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3}) 00:53:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140), 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:22 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3}) 00:53:22 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+60000}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd=r6, 0x0, 0x0, r2}) 00:53:22 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000200)={0x60000000}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x200, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x10}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dd91a79f023033c9060620"], 0x2c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r3, 0x10, 0x70bd28, 0xfffffffc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x401}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004051}, 0x4000000) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0x2dec) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x4002) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') 00:53:22 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 00:53:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3}) 00:53:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140), 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0) 00:53:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:23 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3}) 00:53:23 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+60000}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd=r6, 0x0, 0x0, r2}) 00:53:23 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) socket$inet6_udplite(0xa, 0x2, 0x88) 00:53:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3}) 00:53:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 00:53:23 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+60000}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd, 0x0, 0x0, r2}) 00:53:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:23 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) 00:53:23 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r3}) 00:53:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:53:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:23 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd, 0x0, 0x0, r2}) 00:53:23 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) 00:53:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:53:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:23 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd, 0x0, 0x0, r2}) 00:53:23 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 00:53:23 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) 00:53:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:53:23 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:23 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) 00:53:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd, 0x0, 0x0, r2}) 00:53:23 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) socket$inet6_udplite(0xa, 0x2, 0x88) 00:53:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:53:23 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:23 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) 00:53:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) 00:53:23 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd, 0x0, 0x0, r2}) 00:53:23 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000140), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:53:23 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:23 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:23 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) 00:53:23 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 4: shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:23 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:23 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:23 executing program 4: shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:23 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:23 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) 00:53:23 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:24 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:24 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:24 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:24 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) 00:53:24 executing program 4: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:24 executing program 4: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 00:53:24 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x44101, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:24 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) 00:53:24 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:24 executing program 4: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) socket$inet6_udplite(0xa, 0x2, 0x88) 00:53:24 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:24 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:24 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:24 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) 00:53:24 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) 00:53:24 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:24 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={r3}) 00:53:24 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:24 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:24 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) 00:53:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 00:53:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) 00:53:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:24 executing program 3: shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) 00:53:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 00:53:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) 00:53:24 executing program 3: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 00:53:24 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:24 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) 00:53:24 executing program 3: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:24 executing program 4: shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000000)=[0x10000], &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:24 executing program 3: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) 00:53:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:24 executing program 4: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000040)=[0x8, 0x7, 0x6, 0x3, 0x400, 0x9, 0x1], &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:24 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:24 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) 00:53:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x7f], &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:25 executing program 4: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:25 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:25 executing program 5: shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:25 executing program 3: shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) 00:53:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x1, 0x9, 0x3], 0x0, 0x7d}) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 4: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:25 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 5: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:25 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:25 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x20000, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000280)) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x4, 0x3, 0x2cb, 0x7ff, 0x8, 0x5}) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}) 00:53:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 5: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x390, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x400002, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x400801, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000100)={0x0, 0x3}) 00:53:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:53:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 00:53:25 executing program 5: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x390, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x400002, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x400801, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000100)={0x0, 0x3}) 00:53:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:53:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x390, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x400002, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x400801, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000100)={0x0, 0x3}) 00:53:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 1: shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fee000/0xf000)=nil) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x390, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x400002, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x400801, 0x0) 00:53:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 1: r0 = syz_io_uring_setup(0x7401, &(0x7f0000000180)={0x0, 0x6374, 0x20, 0x0, 0x113}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) io_uring_setup(0x6845, &(0x7f0000000200)={0x0, 0xc2f4, 0x8, 0xfffffffd, 0x1c6, 0x0, r0}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)) 00:53:25 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x390, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x400002, 0x0) 00:53:25 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:25 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 1: r0 = syz_io_uring_setup(0x7401, &(0x7f0000000180)={0x0, 0x6374, 0x20, 0x0, 0x113}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) io_uring_setup(0x6845, &(0x7f0000000200)={0x0, 0xc2f4, 0x8, 0xfffffffd, 0x1c6, 0x0, r0}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x390, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)) 00:53:25 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:25 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:25 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x390, 0x1) 00:53:25 executing program 1: r0 = syz_io_uring_setup(0x7401, &(0x7f0000000180)={0x0, 0x6374, 0x20, 0x0, 0x113}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) io_uring_setup(0x6845, &(0x7f0000000200)={0x0, 0xc2f4, 0x8, 0xfffffffd, 0x1c6, 0x0, r0}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)) 00:53:25 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:26 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) 00:53:26 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) 00:53:26 executing program 1: r0 = syz_io_uring_setup(0x7401, &(0x7f0000000180)={0x0, 0x6374, 0x20, 0x0, 0x113}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) io_uring_setup(0x6845, &(0x7f0000000200)={0x0, 0xc2f4, 0x8, 0xfffffffd, 0x1c6, 0x0, r0}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x4, 0xfffffffd, 0x8, 0xac}) 00:53:26 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x10000, 0x0) 00:53:26 executing program 1: r0 = syz_io_uring_setup(0x7401, &(0x7f0000000180)={0x0, 0x6374, 0x20, 0x0, 0x113}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) io_uring_setup(0x6845, &(0x7f0000000200)={0x0, 0xc2f4, 0x8, 0xfffffffd, 0x1c6, 0x0, r0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:26 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000001c0)={0x1, 0x7f}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xedd5, 0x3}}) 00:53:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:26 executing program 1: r0 = syz_io_uring_setup(0x7401, &(0x7f0000000180)={0x0, 0x6374, 0x20, 0x0, 0x113}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) io_uring_setup(0x6845, &(0x7f0000000200)={0x0, 0xc2f4, 0x8, 0xfffffffd, 0x1c6, 0x0, r0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x3}}) 00:53:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:26 executing program 1: r0 = syz_io_uring_setup(0x7401, &(0x7f0000000180)={0x0, 0x6374, 0x20, 0x0, 0x113}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) io_uring_setup(0x6845, &(0x7f0000000200)={0x0, 0xc2f4, 0x8, 0xfffffffd, 0x1c6, 0x0, r0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 00:53:26 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x20, 0x7, {}, {0x4, 0x2, 0x6, 0x4, 0x8, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:26 executing program 1: syz_io_uring_setup(0x7401, &(0x7f0000000180)={0x0, 0x6374, 0x20, 0x0, 0x113}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:26 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:26 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37e54466"}, 0xfffff24b, 0x1, @fd}) 00:53:26 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37e54466"}, 0x0, 0x1, @fd}) 00:53:26 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:26 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:26 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:27 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37e54466"}, 0x0, 0x0, @fd}) 00:53:27 executing program 0: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:27 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:27 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37e54466"}, 0x0, 0x0, @fd}) 00:53:27 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 0: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37e54466"}, 0x0, 0x0, @fd}) 00:53:27 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:27 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 0: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x891d, &(0x7f0000000380)=@req={0x11}) 00:53:27 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:53:27 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x630d, 0x0, 0x2}) 00:53:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 00:53:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 00:53:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xdb, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 00:53:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 00:53:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xedd5, 0x3}}) 00:53:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 00:53:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:27 executing program 2: write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="3b9e9fc79d2fff2129f1a6d667549ad4067af9d798cf2bdc40e44be264976f1c7ad1954bb0154a04a095f14850d442207a1fb5b68f1cf50cc0ecd83832cec5f4a9d9d27dc9c4fe1351a81639d56da4d6628c686338c610f559a51be6a50a3774ad871ea0013f1e10ce8ef80fc0b5f89b8488a16be4c6ca0bb7a5c4e0e0ad3d29e2895488a308cf25a3d359859d5f477e7705db", 0x93) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}) 00:53:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 00:53:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x0, 0x0, 0x2}) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x3}}) 00:53:27 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r1, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000200)=0xffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r3, 0x2}) 00:53:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 00:53:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) 00:53:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x0, 0x0, 0x2}) 00:53:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x3}}) 00:53:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:53:27 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r1, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000200)=0xffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r3, 0x2}) 00:53:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)) 00:53:27 executing program 1: write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="3b9e9fc79d2fff2129f1a6d667549ad4067af9d798cf2bdc40e44be264976f1c7ad1954bb0154a04a095f14850d442207a1fb5b68f1cf50cc0ecd83832cec5f4a9d9d27dc9c4fe1351a81639d56da4d6628c686338c610f559a51be6a50a3774ad871ea0013f1e10ce8ef80fc0b5f89b8488a16be4c6ca0bb7a5c4e0e0ad3d29e2895488a308cf25a3d359859d5f477e7705db", 0x93) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000081}, 0x4084) write$6lowpan_enable(r1, 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}) 00:53:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x891e, &(0x7f0000000380)=@req={0x6}) 00:53:28 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r1, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000200)=0xffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r3, 0x2}) 00:53:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0xc0045878, &(0x7f0000000380)) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={0x0, 0x5c00}) 00:53:28 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={0x0, 0x5c00}) 00:53:28 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={0x0, 0x500}) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:53:28 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r1, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000200)=0xffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 00:53:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x89a0, &(0x7f0000000380)) 00:53:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)={0x0, 0x25}) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:53:28 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086406, &(0x7f0000000280)) 00:53:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8914, &(0x7f0000000380)) 00:53:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x891d, &(0x7f0000000380)) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x74, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, &(0x7f0000000140)) 00:53:28 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) socket$nl_generic(0x10, 0x3, 0x10) 00:53:28 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086406, &(0x7f0000000280)) 00:53:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:53:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, &(0x7f0000000140)) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7, 0xedd5, 0x3}}) 00:53:28 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086406, &(0x7f0000000280)) 00:53:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xedd5, 0x3}}) 00:53:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, &(0x7f0000000140)) 00:53:28 executing program 1: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086406, &(0x7f0000000280)) 00:53:28 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xedd5, 0x3}}) 00:53:28 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:53:28 executing program 5: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)) 00:53:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x3}}) 00:53:28 executing program 1: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086406, &(0x7f0000000280)) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x3}}) 00:53:28 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) socket$nl_generic(0x10, 0x3, 0x10) 00:53:28 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) 00:53:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 00:53:28 executing program 5: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)) 00:53:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 00:53:28 executing program 1: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086406, &(0x7f0000000280)) 00:53:28 executing program 3: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) 00:53:28 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) 00:53:28 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) 00:53:28 executing program 5: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)) 00:53:28 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:28 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086406, &(0x7f0000000280)) 00:53:28 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) 00:53:29 executing program 3: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) 00:53:29 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, &(0x7f0000000140)) 00:53:29 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086406, &(0x7f0000000280)) 00:53:29 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) 00:53:29 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086406, &(0x7f0000000280)) 00:53:29 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, &(0x7f0000000140)) 00:53:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, &(0x7f0000000140)) 00:53:29 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0xffff) 00:53:29 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086406, &(0x7f0000000280)) 00:53:29 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, &(0x7f0000000140)) 00:53:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, &(0x7f0000000140)) 00:53:29 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086406, &(0x7f0000000280)) 00:53:29 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)) 00:53:29 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @dev={[], 0x30}}, 0x14) 00:53:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, &(0x7f0000000140)) 00:53:29 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086406, &(0x7f0000000280)) 00:53:29 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)) 00:53:29 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 3: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448dd, &(0x7f0000000140)) 00:53:29 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) membarrier(0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086406, 0x0) 00:53:29 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)) 00:53:29 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 3: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448dd, &(0x7f0000000140)) 00:53:29 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x400000) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, 0x0) 00:53:29 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 3: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448dd, &(0x7f0000000140)) 00:53:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, 0x0) 00:53:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:29 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, &(0x7f0000000140)) 00:53:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, 0x0) 00:53:29 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 2: socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:29 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, &(0x7f0000000140)) 00:53:29 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, &(0x7f0000000280)) 00:53:29 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:29 executing program 4: socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 00:53:30 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:53:30 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, &(0x7f0000000140)) 00:53:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, &(0x7f0000000280)) 00:53:30 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, &(0x7f0000000140)) 00:53:30 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:53:30 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, &(0x7f0000000280)) 00:53:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448dd, &(0x7f0000000140)) 00:53:30 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:53:30 executing program 2: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, &(0x7f0000000140)) 00:53:30 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448dd, &(0x7f0000000140)) 00:53:30 executing program 5: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) 00:53:30 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:30 executing program 2: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, &(0x7f0000000140)) 00:53:30 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448dd, &(0x7f0000000140)) 00:53:30 executing program 5: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) 00:53:30 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 00:53:30 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:30 executing program 2: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, 0x0) 00:53:30 executing program 4: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x6364, &(0x7f0000000140)) 00:53:30 executing program 0: socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 00:53:30 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:30 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 5: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) 00:53:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, 0x0) 00:53:30 executing program 4: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x6364, &(0x7f0000000140)) 00:53:30 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:53:30 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:30 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, &(0x7f0000000280)) 00:53:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, &(0x7f0000000140)) 00:53:30 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:53:30 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:30 executing program 4: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x6364, &(0x7f0000000140)) 00:53:30 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, &(0x7f0000000280)) 00:53:30 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, &(0x7f0000000140)) 00:53:30 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:53:30 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, &(0x7f0000000280)) 00:53:30 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, &(0x7f0000000140)) 00:53:30 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$l2tp(0x2, 0x2, 0x73) 00:53:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, 0x0) 00:53:30 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) 00:53:30 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)) 00:53:30 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, &(0x7f0000000140)) 00:53:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, &(0x7f0000000140)) 00:53:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, 0x0) 00:53:30 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) 00:53:31 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, &(0x7f0000000140)) 00:53:31 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) 00:53:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, 0x0) 00:53:31 executing program 3: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, &(0x7f0000000140)) 00:53:31 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)) 00:53:31 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x6364, &(0x7f0000000140)) 00:53:31 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) 00:53:31 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:31 executing program 3: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, &(0x7f0000000140)) 00:53:31 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, 0x0) 00:53:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:31 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x6364, &(0x7f0000000140)) 00:53:31 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:31 executing program 3: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, &(0x7f0000000140)) [ 906.852555][T23409] FAULT_INJECTION: forcing a failure. [ 906.852555][T23409] name failslab, interval 1, probability 0, space 0, times 0 [ 906.896401][T23409] CPU: 1 PID: 23409 Comm: syz-executor.1 Not tainted 5.10.0-rc5-syzkaller #0 [ 906.905191][T23409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.915292][T23409] Call Trace: [ 906.918584][T23409] dump_stack+0x116/0x15d [ 906.922907][T23409] should_fail+0x231/0x240 [ 906.927317][T23409] __should_failslab+0x81/0x90 [ 906.932122][T23409] should_failslab+0x5/0x20 [ 906.936623][T23409] slab_pre_alloc_hook+0x20/0xb0 [ 906.941586][T23409] __kmalloc+0x73/0x2c0 [ 906.945730][T23409] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 906.951979][T23409] ? __rcu_read_unlock+0x51/0x220 [ 906.956997][T23409] tomoyo_realpath_from_path+0x98/0x3b0 [ 906.962534][T23409] tomoyo_path_number_perm+0xc1/0x2d0 [ 906.968039][T23409] ? __rcu_read_unlock+0x51/0x220 [ 906.973056][T23409] tomoyo_file_ioctl+0x1c/0x20 [ 906.977893][T23409] security_file_ioctl+0x45/0x90 [ 906.983863][T23409] __se_sys_ioctl+0x48/0x140 [ 906.988515][T23409] __x64_sys_ioctl+0x3f/0x50 [ 906.993143][T23409] do_syscall_64+0x39/0x80 [ 906.997622][T23409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.003506][T23409] RIP: 0033:0x45deb9 [ 907.007401][T23409] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 907.027095][T23409] RSP: 002b:00007f851cadbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.035542][T23409] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 00:53:31 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, &(0x7f0000000140)) 00:53:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, 0x0) 00:53:31 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x6364, &(0x7f0000000140)) [ 907.043542][T23409] RDX: 0000000020000140 RSI: 00000000400448c9 RDI: 0000000000000003 [ 907.051505][T23409] RBP: 00007f851cadbca0 R08: 0000000000000000 R09: 0000000000000000 [ 907.059547][T23409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.067577][T23409] R13: 00007ffd43e1b73f R14: 00007f851cadc9c0 R15: 000000000118bf2c 00:53:31 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, &(0x7f0000000140)) 00:53:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xcb84, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:31 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:31 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) [ 907.171572][T23409] ERROR: Out of memory at tomoyo_realpath_from_path. 00:53:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, 0x0) 00:53:31 executing program 0: syz_io_uring_setup(0x39ab, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:31 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, &(0x7f0000000140)) [ 907.271389][T23439] FAULT_INJECTION: forcing a failure. [ 907.271389][T23439] name failslab, interval 1, probability 0, space 0, times 0 [ 907.322811][T23439] CPU: 1 PID: 23439 Comm: syz-executor.1 Not tainted 5.10.0-rc5-syzkaller #0 [ 907.331591][T23439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.341637][T23439] Call Trace: [ 907.344931][T23439] dump_stack+0x116/0x15d [ 907.349262][T23439] should_fail+0x231/0x240 [ 907.353711][T23439] __should_failslab+0x81/0x90 [ 907.358595][T23439] should_failslab+0x5/0x20 [ 907.363128][T23439] slab_pre_alloc_hook+0x20/0xb0 [ 907.368058][T23439] __kmalloc+0x73/0x2c0 [ 907.372214][T23439] ? tomoyo_encode2+0x1d3/0x350 [ 907.377064][T23439] tomoyo_encode2+0x1d3/0x350 [ 907.381741][T23439] tomoyo_realpath_from_path+0x35e/0x3b0 [ 907.387375][T23439] tomoyo_path_number_perm+0xc1/0x2d0 [ 907.392748][T23439] ? __rcu_read_unlock+0x51/0x220 [ 907.397765][T23439] tomoyo_file_ioctl+0x1c/0x20 [ 907.402520][T23439] security_file_ioctl+0x45/0x90 [ 907.407450][T23439] __se_sys_ioctl+0x48/0x140 [ 907.412029][T23439] __x64_sys_ioctl+0x3f/0x50 [ 907.416613][T23439] do_syscall_64+0x39/0x80 [ 907.421021][T23439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.426907][T23439] RIP: 0033:0x45deb9 [ 907.430873][T23439] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 907.450505][T23439] RSP: 002b:00007f851cadbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.458914][T23439] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 00:53:31 executing program 0: syz_io_uring_setup(0x39ab, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:31 executing program 0: syz_io_uring_setup(0x39ab, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:31 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:31 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:31 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) [ 907.466883][T23439] RDX: 0000000020000140 RSI: 00000000400448c9 RDI: 0000000000000003 [ 907.474845][T23439] RBP: 00007f851cadbca0 R08: 0000000000000000 R09: 0000000000000000 [ 907.482842][T23439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.490815][T23439] R13: 00007ffd43e1b73f R14: 00007f851cadc9c0 R15: 000000000118bf2c [ 907.510590][T23439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 907.540487][T23456] FAULT_INJECTION: forcing a failure. [ 907.540487][T23456] name failslab, interval 1, probability 0, space 0, times 0 [ 907.568596][T23459] FAULT_INJECTION: forcing a failure. [ 907.568596][T23459] name failslab, interval 1, probability 0, space 0, times 0 [ 907.583381][T23456] CPU: 1 PID: 23456 Comm: syz-executor.5 Not tainted 5.10.0-rc5-syzkaller #0 [ 907.592156][T23456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.602229][T23456] Call Trace: [ 907.605522][T23456] dump_stack+0x116/0x15d [ 907.609854][T23456] should_fail+0x231/0x240 [ 907.614267][T23456] __should_failslab+0x81/0x90 [ 907.619085][T23456] should_failslab+0x5/0x20 [ 907.624237][T23456] slab_pre_alloc_hook+0x20/0xb0 [ 907.630278][T23456] __kmalloc+0x73/0x2c0 [ 907.634439][T23456] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 907.640148][T23456] ? __rcu_read_unlock+0x51/0x220 [ 907.645197][T23456] tomoyo_realpath_from_path+0x98/0x3b0 [ 907.650740][T23456] tomoyo_path_number_perm+0xc1/0x2d0 [ 907.656108][T23456] ? __rcu_read_unlock+0x51/0x220 [ 907.656698][T23467] FAULT_INJECTION: forcing a failure. [ 907.656698][T23467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.661130][T23456] tomoyo_file_ioctl+0x1c/0x20 [ 907.661143][T23456] security_file_ioctl+0x45/0x90 [ 907.661155][T23456] __se_sys_ioctl+0x48/0x140 [ 907.661186][T23456] __x64_sys_ioctl+0x3f/0x50 [ 907.693312][T23456] do_syscall_64+0x39/0x80 [ 907.697736][T23456] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.703782][T23456] RIP: 0033:0x45deb9 [ 907.707683][T23456] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 907.727288][T23456] RSP: 002b:00007f4122d92c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:53:31 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:31 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, &(0x7f0000000140)) 00:53:31 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:32 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, &(0x7f0000000140)) 00:53:32 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, &(0x7f0000000140)) [ 907.735697][T23456] RAX: ffffffffffffffda RBX: 000000000000b540 RCX: 000000000045deb9 [ 907.743665][T23456] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 907.751681][T23456] RBP: 00007f4122d92ca0 R08: 0000000000000000 R09: 0000000000000000 [ 907.759691][T23456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.767707][T23456] R13: 00007ffe9c5999ff R14: 00007f4122d939c0 R15: 000000000118bf2c [ 907.775678][T23467] CPU: 0 PID: 23467 Comm: syz-executor.1 Not tainted 5.10.0-rc5-syzkaller #0 [ 907.784472][T23467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.794522][T23467] Call Trace: [ 907.795539][T23470] FAULT_INJECTION: forcing a failure. [ 907.795539][T23470] name failslab, interval 1, probability 0, space 0, times 0 [ 907.797801][T23467] dump_stack+0x116/0x15d [ 907.797812][T23467] should_fail+0x231/0x240 [ 907.797826][T23467] ? drm_mode_get_lease_ioctl+0x2a0/0x2a0 [ 907.797843][T23467] should_fail_usercopy+0x16/0x20 [ 907.829972][T23467] _copy_from_user+0x1c/0xd0 [ 907.834554][T23467] ? drm_mode_get_lease_ioctl+0x2a0/0x2a0 [ 907.840263][T23467] drm_ioctl+0x373/0x5e0 [ 907.844587][T23467] ? drm_mode_get_lease_ioctl+0x2a0/0x2a0 [ 907.850294][T23467] ? do_vfs_ioctl+0x4f7/0xec0 [ 907.855019][T23467] ? tomoyo_file_ioctl+0x1c/0x20 [ 907.859939][T23467] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 907.864954][T23467] __se_sys_ioctl+0xcb/0x140 [ 907.869547][T23467] __x64_sys_ioctl+0x3f/0x50 [ 907.874146][T23467] do_syscall_64+0x39/0x80 [ 907.878612][T23467] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.884481][T23467] RIP: 0033:0x45deb9 [ 907.888354][T23467] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 907.907946][T23467] RSP: 002b:00007f851cadbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.916339][T23467] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 [ 907.924288][T23467] RDX: 0000000020000140 RSI: 00000000400448c9 RDI: 0000000000000003 [ 907.932291][T23467] RBP: 00007f851cadbca0 R08: 0000000000000000 R09: 0000000000000000 [ 907.940259][T23467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.948230][T23467] R13: 00007ffd43e1b73f R14: 00007f851cadc9c0 R15: 000000000118bf2c [ 907.956198][T23470] CPU: 1 PID: 23470 Comm: syz-executor.4 Not tainted 5.10.0-rc5-syzkaller #0 [ 907.965740][T23470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.975806][T23470] Call Trace: [ 907.979092][T23470] dump_stack+0x116/0x15d [ 907.983424][T23470] should_fail+0x231/0x240 [ 907.987848][T23470] __should_failslab+0x81/0x90 [ 907.992617][T23470] should_failslab+0x5/0x20 [ 907.997123][T23470] slab_pre_alloc_hook+0x20/0xb0 [ 908.002071][T23470] __kmalloc+0x73/0x2c0 [ 908.006277][T23470] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 908.011993][T23470] ? __rcu_read_unlock+0x51/0x220 [ 908.017807][T23470] tomoyo_realpath_from_path+0x98/0x3b0 [ 908.024036][T23470] tomoyo_path_number_perm+0xc1/0x2d0 [ 908.029705][T23470] ? __rcu_read_unlock+0x51/0x220 [ 908.034736][T23470] tomoyo_file_ioctl+0x1c/0x20 [ 908.039555][T23470] security_file_ioctl+0x45/0x90 [ 908.044496][T23470] __se_sys_ioctl+0x48/0x140 [ 908.049084][T23470] __x64_sys_ioctl+0x3f/0x50 [ 908.054228][T23470] do_syscall_64+0x39/0x80 [ 908.058647][T23470] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.064956][T23470] RIP: 0033:0x45deb9 [ 908.069277][T23470] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 908.089022][T23470] RSP: 002b:00007f8c2323cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.097719][T23470] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 [ 908.105695][T23470] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 0000000000000003 [ 908.113660][T23470] RBP: 00007f8c2323cca0 R08: 0000000000000000 R09: 0000000000000000 [ 908.121620][T23470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.130170][T23470] R13: 00007ffd7f6f665f R14: 00007f8c2323d9c0 R15: 000000000118bf2c [ 908.151361][T23459] CPU: 1 PID: 23459 Comm: syz-executor.2 Not tainted 5.10.0-rc5-syzkaller #0 [ 908.160226][T23459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.170887][T23459] Call Trace: [ 908.174205][T23459] dump_stack+0x116/0x15d [ 908.178524][T23459] should_fail+0x231/0x240 [ 908.183031][T23459] __should_failslab+0x81/0x90 [ 908.187794][T23459] should_failslab+0x5/0x20 [ 908.192290][T23459] slab_pre_alloc_hook+0x20/0xb0 [ 908.197222][T23459] __kmalloc+0x73/0x2c0 [ 908.201375][T23459] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 908.207083][T23459] ? __rcu_read_unlock+0x51/0x220 [ 908.212597][T23459] tomoyo_realpath_from_path+0x98/0x3b0 [ 908.218150][T23459] tomoyo_path_number_perm+0xc1/0x2d0 [ 908.223553][T23459] ? __rcu_read_unlock+0x51/0x220 [ 908.228593][T23459] tomoyo_file_ioctl+0x1c/0x20 [ 908.233356][T23459] security_file_ioctl+0x45/0x90 [ 908.238292][T23459] __se_sys_ioctl+0x48/0x140 [ 908.242876][T23459] __x64_sys_ioctl+0x3f/0x50 [ 908.247475][T23459] do_syscall_64+0x39/0x80 [ 908.251892][T23459] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.257771][T23459] RIP: 0033:0x45deb9 [ 908.261661][T23459] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 908.281255][T23459] RSP: 002b:00007fcbbfcb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.289691][T23459] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 00:53:32 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 908.297658][T23459] RDX: 0000000020000140 RSI: 0000000000008913 RDI: 0000000000000003 [ 908.305625][T23459] RBP: 00007fcbbfcb8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 908.313820][T23459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.321884][T23459] R13: 00007ffce2cbb32f R14: 00007fcbbfcb99c0 R15: 000000000118bf2c 00:53:32 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) [ 908.351952][T23459] ERROR: Out of memory at tomoyo_realpath_from_path. [ 908.372725][T23470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 908.380157][T23483] FAULT_INJECTION: forcing a failure. [ 908.380157][T23483] name failslab, interval 1, probability 0, space 0, times 0 [ 908.399608][T23483] CPU: 1 PID: 23483 Comm: syz-executor.3 Not tainted 5.10.0-rc5-syzkaller #0 [ 908.408384][T23483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.418428][T23483] Call Trace: [ 908.421722][T23483] dump_stack+0x116/0x15d [ 908.426060][T23483] should_fail+0x231/0x240 [ 908.431205][T23483] __should_failslab+0x81/0x90 [ 908.436007][T23483] should_failslab+0x5/0x20 [ 908.441017][T23483] slab_pre_alloc_hook+0x20/0xb0 [ 908.445954][T23483] __kmalloc+0x73/0x2c0 [ 908.450451][T23483] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 908.456699][T23483] ? __rcu_read_unlock+0x51/0x220 [ 908.460728][T23456] ERROR: Out of memory at tomoyo_realpath_from_path. [ 908.462331][T23483] tomoyo_realpath_from_path+0x98/0x3b0 [ 908.462418][T23483] tomoyo_path_number_perm+0xc1/0x2d0 [ 908.479902][T23483] ? __rcu_read_unlock+0x51/0x220 [ 908.484927][T23483] tomoyo_file_ioctl+0x1c/0x20 [ 908.490080][T23483] security_file_ioctl+0x45/0x90 [ 908.495089][T23483] __se_sys_ioctl+0x48/0x140 [ 908.500110][T23483] __x64_sys_ioctl+0x3f/0x50 [ 908.504700][T23483] do_syscall_64+0x39/0x80 [ 908.509884][T23483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.515779][T23483] RIP: 0033:0x45deb9 [ 908.519673][T23483] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 908.539458][T23483] RSP: 002b:00007f8dcd099c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:53:32 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:32 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x20b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:33 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 908.547864][T23483] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 [ 908.556116][T23483] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 908.564085][T23483] RBP: 00007f8dcd099ca0 R08: 0000000000000000 R09: 0000000000000000 [ 908.572049][T23483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.580139][T23483] R13: 00007fff017bc68f R14: 00007f8dcd09a9c0 R15: 000000000118bf2c [ 908.658426][T23499] FAULT_INJECTION: forcing a failure. [ 908.658426][T23499] name failslab, interval 1, probability 0, space 0, times 0 [ 908.673451][T23499] CPU: 1 PID: 23499 Comm: syz-executor.4 Not tainted 5.10.0-rc5-syzkaller #0 [ 908.682542][T23499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.692606][T23499] Call Trace: [ 908.696576][T23499] dump_stack+0x116/0x15d [ 908.701065][T23499] should_fail+0x231/0x240 [ 908.705493][T23499] __should_failslab+0x81/0x90 [ 908.710303][T23499] should_failslab+0x5/0x20 [ 908.714810][T23499] slab_pre_alloc_hook+0x20/0xb0 [ 908.719777][T23499] __kmalloc+0x73/0x2c0 [ 908.724430][T23499] ? tomoyo_encode2+0x1d3/0x350 [ 908.729282][T23499] tomoyo_encode2+0x1d3/0x350 [ 908.734259][T23499] tomoyo_realpath_from_path+0x35e/0x3b0 [ 908.741383][T23499] tomoyo_path_number_perm+0xc1/0x2d0 [ 908.747958][T23499] ? __rcu_read_unlock+0x51/0x220 [ 908.753042][T23499] tomoyo_file_ioctl+0x1c/0x20 [ 908.757803][T23499] security_file_ioctl+0x45/0x90 [ 908.762744][T23499] __se_sys_ioctl+0x48/0x140 [ 908.767387][T23499] __x64_sys_ioctl+0x3f/0x50 [ 908.771979][T23499] do_syscall_64+0x39/0x80 [ 908.776389][T23499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.782274][T23499] RIP: 0033:0x45deb9 [ 908.786272][T23499] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:33 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x2, 0x0) 00:53:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x2, &(0x7f0000000140)) [ 908.805875][T23499] RSP: 002b:00007f8c2323cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.814279][T23499] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 [ 908.822243][T23499] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 0000000000000003 [ 908.830202][T23499] RBP: 00007f8c2323cca0 R08: 0000000000000000 R09: 0000000000000000 [ 908.839040][T23499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.847005][T23499] R13: 00007ffd7f6f665f R14: 00007f8c2323d9c0 R15: 000000000118bf2c 00:53:33 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:33 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 908.860401][T23499] ERROR: Out of memory at tomoyo_realpath_from_path. 00:53:33 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x10, 0x0) [ 908.924839][T23483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 908.953010][T23518] FAULT_INJECTION: forcing a failure. [ 908.953010][T23518] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:53:33 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x2, &(0x7f0000000140)) 00:53:33 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:53:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x10, &(0x7f0000000140)) [ 908.974305][T23518] CPU: 1 PID: 23518 Comm: syz-executor.4 Not tainted 5.10.0-rc5-syzkaller #0 [ 908.983078][T23518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.993129][T23518] Call Trace: [ 908.997118][T23518] dump_stack+0x116/0x15d [ 909.001454][T23518] should_fail+0x231/0x240 [ 909.005866][T23518] should_fail_usercopy+0x16/0x20 [ 909.010897][T23518] _copy_to_user+0x1c/0x90 [ 909.015318][T23518] simple_read_from_buffer+0xab/0x120 00:53:33 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x4c01, 0x0) [ 909.020752][T23518] proc_fail_nth_read+0xf6/0x140 [ 909.026444][T23518] ? rw_verify_area+0x136/0x250 [ 909.031351][T23518] ? proc_fault_inject_write+0x200/0x200 [ 909.036985][T23518] vfs_read+0x154/0x5c0 [ 909.041678][T23518] ? __fget_light+0x219/0x260 [ 909.046355][T23518] ksys_read+0xce/0x180 [ 909.050526][T23518] __x64_sys_read+0x3e/0x50 [ 909.055039][T23518] do_syscall_64+0x39/0x80 [ 909.059455][T23518] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.065342][T23518] RIP: 0033:0x4177b1 [ 909.069232][T23518] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 909.089674][T23518] RSP: 002b:00007f8c2323cc80 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 909.098085][T23518] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004177b1 [ 909.106057][T23518] RDX: 000000000000000f RSI: 00007f8c2323ccb0 RDI: 0000000000000004 [ 909.114274][T23518] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 00:53:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, &(0x7f0000000140)) [ 909.122417][T23518] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 909.130383][T23518] R13: 00007ffd7f6f665f R14: 00007f8c2323d9c0 R15: 000000000118bf2c [ 909.159014][T23529] FAULT_INJECTION: forcing a failure. [ 909.159014][T23529] name failslab, interval 1, probability 0, space 0, times 0 00:53:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x10, &(0x7f0000000140)) 00:53:33 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x5421, 0x0) [ 909.186456][T23529] CPU: 1 PID: 23529 Comm: syz-executor.3 Not tainted 5.10.0-rc5-syzkaller #0 [ 909.195515][T23529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.205614][T23529] Call Trace: [ 909.208905][T23529] dump_stack+0x116/0x15d [ 909.213428][T23529] should_fail+0x231/0x240 [ 909.217843][T23529] __should_failslab+0x81/0x90 [ 909.222609][T23529] should_failslab+0x5/0x20 [ 909.227183][T23529] slab_pre_alloc_hook+0x20/0xb0 [ 909.232119][T23529] __kmalloc+0x73/0x2c0 00:53:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x541b, &(0x7f0000000140)) [ 909.236376][T23529] ? tomoyo_encode2+0x1d3/0x350 [ 909.241222][T23529] tomoyo_encode2+0x1d3/0x350 [ 909.245903][T23529] tomoyo_realpath_from_path+0x35e/0x3b0 [ 909.251535][T23529] tomoyo_path_number_perm+0xc1/0x2d0 [ 909.256944][T23529] ? __rcu_read_unlock+0x51/0x220 [ 909.261970][T23529] tomoyo_file_ioctl+0x1c/0x20 [ 909.267574][T23529] security_file_ioctl+0x45/0x90 [ 909.272519][T23529] __se_sys_ioctl+0x48/0x140 [ 909.277107][T23529] __x64_sys_ioctl+0x3f/0x50 [ 909.281699][T23529] do_syscall_64+0x39/0x80 [ 909.286308][T23529] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.292201][T23529] RIP: 0033:0x45deb9 [ 909.296326][T23529] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 909.315979][T23529] RSP: 002b:00007f8dcd099c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.324391][T23529] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 00:53:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, &(0x7f0000000140)) 00:53:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:33 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x5450, 0x0) [ 909.332358][T23529] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 909.340378][T23529] RBP: 00007f8dcd099ca0 R08: 0000000000000000 R09: 0000000000000000 [ 909.348344][T23529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.356314][T23529] R13: 00007fff017bc68f R14: 00007f8dcd09a9c0 R15: 000000000118bf2c [ 909.378558][T23529] ERROR: Out of memory at tomoyo_realpath_from_path. 00:53:33 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:33 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:53:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5421, &(0x7f0000000140)) 00:53:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x541b, &(0x7f0000000140)) 00:53:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x2, 0x0) 00:53:33 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x5451, 0x0) 00:53:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5421, &(0x7f0000000140)) 00:53:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5450, &(0x7f0000000140)) 00:53:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x10, 0x0) [ 909.510924][T23561] FAULT_INJECTION: forcing a failure. [ 909.510924][T23561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.572145][T23561] CPU: 0 PID: 23561 Comm: syz-executor.3 Not tainted 5.10.0-rc5-syzkaller #0 [ 909.580917][T23561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.590971][T23561] Call Trace: [ 909.594259][T23561] dump_stack+0x116/0x15d [ 909.598966][T23561] should_fail+0x231/0x240 [ 909.603412][T23561] ? tsan.module_ctor+0x10/0x10 [ 909.608413][T23561] should_fail_usercopy+0x16/0x20 [ 909.613435][T23561] _copy_from_user+0x1c/0xd0 00:53:33 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:53:34 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x5452, 0x0) 00:53:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5450, &(0x7f0000000140)) [ 909.618100][T23561] ? tsan.module_ctor+0x10/0x10 [ 909.623014][T23561] drm_ioctl+0x373/0x5e0 [ 909.627299][T23561] ? tsan.module_ctor+0x10/0x10 [ 909.632212][T23561] ? do_vfs_ioctl+0x4f7/0xec0 [ 909.636890][T23561] ? tomoyo_file_ioctl+0x1c/0x20 [ 909.641830][T23561] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 909.646846][T23561] __se_sys_ioctl+0xcb/0x140 [ 909.651438][T23561] __x64_sys_ioctl+0x3f/0x50 [ 909.656026][T23561] do_syscall_64+0x39/0x80 [ 909.660476][T23561] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.666449][T23561] RIP: 0033:0x45deb9 [ 909.670411][T23561] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 909.690014][T23561] RSP: 002b:00007f8dcd099c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.698440][T23561] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 [ 909.706418][T23561] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 909.714534][T23561] RBP: 00007f8dcd099ca0 R08: 0000000000000000 R09: 0000000000000000 [ 909.722620][T23561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 909.730586][T23561] R13: 00007fff017bc68f R14: 00007f8dcd09a9c0 R15: 000000000118bf2c 00:53:34 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:34 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x5460, 0x0) 00:53:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5451, &(0x7f0000000140)) 00:53:34 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) 00:53:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5451, &(0x7f0000000140)) 00:53:34 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x54ce, 0x0) [ 909.984176][T23594] FAULT_INJECTION: forcing a failure. [ 909.984176][T23594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.010341][T23594] CPU: 0 PID: 23594 Comm: syz-executor.3 Not tainted 5.10.0-rc5-syzkaller #0 [ 910.019144][T23594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.029190][T23594] Call Trace: [ 910.032482][T23594] dump_stack+0x116/0x15d [ 910.036815][T23594] should_fail+0x231/0x240 [ 910.041683][T23594] should_fail_usercopy+0x16/0x20 [ 910.046745][T23594] _copy_to_user+0x1c/0x90 [ 910.051159][T23594] drm_getunique+0xc4/0x140 [ 910.055705][T23594] drm_ioctl_kernel+0x218/0x2b0 [ 910.060579][T23594] ? tsan.module_ctor+0x10/0x10 [ 910.065507][T23594] drm_ioctl+0x406/0x5e0 [ 910.069742][T23594] ? tsan.module_ctor+0x10/0x10 [ 910.074688][T23594] ? do_vfs_ioctl+0x4f7/0xec0 [ 910.079397][T23594] ? tomoyo_file_ioctl+0x1c/0x20 [ 910.084323][T23594] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 910.089392][T23594] __se_sys_ioctl+0xcb/0x140 [ 910.093981][T23594] __x64_sys_ioctl+0x3f/0x50 [ 910.098560][T23594] do_syscall_64+0x39/0x80 [ 910.103036][T23594] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.108946][T23594] RIP: 0033:0x45deb9 [ 910.112833][T23594] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 910.132433][T23594] RSP: 002b:00007f8dcd099c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.140878][T23594] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 [ 910.148977][T23594] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 910.156970][T23594] RBP: 00007f8dcd099ca0 R08: 0000000000000000 R09: 0000000000000000 [ 910.164939][T23594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 910.172915][T23594] R13: 00007fff017bc68f R14: 00007f8dcd09a9c0 R15: 000000000118bf2c 00:53:34 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) 00:53:34 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x6364, 0x0) 00:53:34 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5452, &(0x7f0000000140)) 00:53:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5452, &(0x7f0000000140)) 00:53:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x541b, 0x0) 00:53:34 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) 00:53:34 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x8913, 0x0) [ 910.362571][T23623] FAULT_INJECTION: forcing a failure. [ 910.362571][T23623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.401943][T23623] CPU: 0 PID: 23623 Comm: syz-executor.3 Not tainted 5.10.0-rc5-syzkaller #0 00:53:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5460, &(0x7f0000000140)) 00:53:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5421, 0x0) [ 910.410845][T23623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.421075][T23623] Call Trace: [ 910.424366][T23623] dump_stack+0x116/0x15d [ 910.428732][T23623] should_fail+0x231/0x240 [ 910.433156][T23623] should_fail_usercopy+0x16/0x20 [ 910.438197][T23623] _copy_to_user+0x1c/0x90 [ 910.442614][T23623] drm_ioctl+0x42c/0x5e0 [ 910.446850][T23623] ? tsan.module_ctor+0x10/0x10 [ 910.451709][T23623] ? do_vfs_ioctl+0x4f7/0xec0 [ 910.456395][T23623] ? tomoyo_file_ioctl+0x1c/0x20 00:53:34 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x8914, 0x0) 00:53:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5450, 0x0) [ 910.461330][T23623] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 910.466404][T23623] __se_sys_ioctl+0xcb/0x140 [ 910.471026][T23623] __x64_sys_ioctl+0x3f/0x50 [ 910.475612][T23623] do_syscall_64+0x39/0x80 [ 910.480029][T23623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.485913][T23623] RIP: 0033:0x45deb9 [ 910.489804][T23623] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:34 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x8933, 0x0) 00:53:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5460, &(0x7f0000000140)) [ 910.509554][T23623] RSP: 002b:00007f8dcd099c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.517964][T23623] RAX: ffffffffffffffda RBX: 000000000000ccc0 RCX: 000000000045deb9 [ 910.525979][T23623] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 910.533958][T23623] RBP: 00007f8dcd099ca0 R08: 0000000000000000 R09: 0000000000000000 [ 910.541931][T23623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 910.549978][T23623] R13: 00007fff017bc68f R14: 00007f8dcd09a9c0 R15: 000000000118bf2c 00:53:35 executing program 3 (fault-call:1 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5451, 0x0) 00:53:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, &(0x7f0000000140)) 00:53:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5451, &(0x7f0000000140)) 00:53:35 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x400448c9, 0x0) 00:53:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5452, 0x0) 00:53:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8914, &(0x7f0000000140)) 00:53:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, &(0x7f0000000140)) 00:53:35 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x400448dd, 0x0) [ 910.753425][T23659] FAULT_INJECTION: forcing a failure. [ 910.753425][T23659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.792293][T23659] CPU: 0 PID: 23659 Comm: syz-executor.3 Not tainted 5.10.0-rc5-syzkaller #0 00:53:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5451, &(0x7f0000000140)) [ 910.801198][T23659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.811675][T23659] Call Trace: [ 910.814968][T23659] dump_stack+0x116/0x15d [ 910.819306][T23659] should_fail+0x231/0x240 [ 910.823781][T23659] should_fail_usercopy+0x16/0x20 [ 910.828811][T23659] _copy_to_user+0x1c/0x90 [ 910.833294][T23659] simple_read_from_buffer+0xab/0x120 [ 910.838694][T23659] proc_fail_nth_read+0xf6/0x140 [ 910.843645][T23659] ? rw_verify_area+0x136/0x250 [ 910.848496][T23659] ? proc_fault_inject_write+0x200/0x200 00:53:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8933, &(0x7f0000000140)) [ 910.854118][T23659] vfs_read+0x154/0x5c0 [ 910.858276][T23659] ? __fget_light+0x219/0x260 [ 910.862954][T23659] ksys_read+0xce/0x180 [ 910.867128][T23659] __x64_sys_read+0x3e/0x50 [ 910.871633][T23659] do_syscall_64+0x39/0x80 [ 910.876859][T23659] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.883097][T23659] RIP: 0033:0x4177b1 00:53:35 executing program 0 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) [ 910.887584][T23659] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 910.910584][T23659] RSP: 002b:00007f8dcd099c80 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 910.920771][T23659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004177b1 [ 910.928857][T23659] RDX: 000000000000000f RSI: 00007f8dcd099cb0 RDI: 0000000000000004 [ 910.937091][T23659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 910.945067][T23659] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 910.953039][T23659] R13: 00007fff017bc68f R14: 00007f8dcd09a9c0 R15: 000000000118bf2c [ 910.957484][T23673] FAULT_INJECTION: forcing a failure. [ 910.957484][T23673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.004470][T23673] CPU: 1 PID: 23673 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 911.013254][T23673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.023301][T23673] Call Trace: [ 911.028110][T23673] dump_stack+0x116/0x15d [ 911.032684][T23673] should_fail+0x231/0x240 [ 911.037097][T23673] should_fail_usercopy+0x16/0x20 [ 911.042847][T23673] _copy_from_user+0x1c/0xd0 [ 911.048012][T23673] __x64_sys_io_uring_setup+0x4b/0x120 [ 911.054656][T23673] ? fput+0x2d/0x130 [ 911.058846][T23673] ? ksys_write+0x157/0x180 [ 911.063421][T23673] ? fpregs_assert_state_consistent+0x7d/0x90 [ 911.070583][T23673] ? exit_to_user_mode_prepare+0x65/0x170 [ 911.076896][T23673] do_syscall_64+0x39/0x80 [ 911.082062][T23673] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 911.088439][T23673] RIP: 0033:0x45deb9 [ 911.095016][T23673] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 911.114796][T23673] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 911.123200][T23673] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 911.131164][T23673] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 911.139292][T23673] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 911.147260][T23673] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 00:53:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5460, 0x0) 00:53:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x89ce, &(0x7f0000000140)) 00:53:35 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x400454ca, 0x0) 00:53:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) [ 911.155226][T23673] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x635c, 0x0) 00:53:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x2, 0x0) 00:53:35 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40049409, 0x0) 00:53:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, 0x0) 00:53:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x10, 0x0) 00:53:35 executing program 0 (fault-call:0 fault-nth:1): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8914, &(0x7f0000000140)) 00:53:35 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40186366, 0x0) 00:53:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c03, 0x0) 00:53:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, &(0x7f0000000140)) 00:53:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8914, 0x0) 00:53:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8933, &(0x7f0000000140)) [ 911.412741][T23706] FAULT_INJECTION: forcing a failure. [ 911.412741][T23706] name failslab, interval 1, probability 0, space 0, times 0 [ 911.474314][T23706] CPU: 1 PID: 23706 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 911.483085][T23706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.493126][T23706] Call Trace: [ 911.496470][T23706] dump_stack+0x116/0x15d [ 911.500795][T23706] should_fail+0x231/0x240 [ 911.505208][T23706] __should_failslab+0x81/0x90 [ 911.510027][T23706] should_failslab+0x5/0x20 [ 911.514546][T23706] slab_pre_alloc_hook+0x20/0xb0 [ 911.519572][T23706] kmem_cache_alloc_trace+0x52/0x280 [ 911.524844][T23706] ? io_uring_create+0x377/0x1ef0 [ 911.529860][T23706] io_uring_create+0x377/0x1ef0 [ 911.534788][T23706] ? vfs_write+0x54d/0x7c0 [ 911.539203][T23706] __x64_sys_io_uring_setup+0xe1/0x120 [ 911.544653][T23706] do_syscall_64+0x39/0x80 [ 911.549057][T23706] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 911.555265][T23706] RIP: 0033:0x45deb9 [ 911.559158][T23706] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 911.580057][T23706] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 911.588547][T23706] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 911.596512][T23706] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 911.604490][T23706] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 911.612505][T23706] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 00:53:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c05, 0x0) [ 911.620550][T23706] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:36 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x4020940d, 0x0) 00:53:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, &(0x7f0000000140)) 00:53:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8933, 0x0) 00:53:36 executing program 0 (fault-call:0 fault-nth:2): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) [ 911.727914][T23728] FAULT_INJECTION: forcing a failure. [ 911.727914][T23728] name failslab, interval 1, probability 0, space 0, times 0 [ 911.752410][T23728] CPU: 1 PID: 23728 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 911.761210][T23728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.772812][T23728] Call Trace: [ 911.776204][T23728] dump_stack+0x116/0x15d [ 911.780531][T23728] should_fail+0x231/0x240 [ 911.785062][T23728] __should_failslab+0x81/0x90 [ 911.790002][T23728] should_failslab+0x5/0x20 [ 911.794492][T23728] slab_pre_alloc_hook+0x20/0xb0 [ 911.799423][T23728] kmem_cache_alloc+0x4d/0x280 [ 911.804247][T23728] ? io_uring_create+0x3a5/0x1ef0 [ 911.809435][T23728] io_uring_create+0x3a5/0x1ef0 [ 911.814394][T23728] ? vfs_write+0x54d/0x7c0 [ 911.819866][T23728] __x64_sys_io_uring_setup+0xe1/0x120 [ 911.826588][T23728] do_syscall_64+0x39/0x80 [ 911.831183][T23728] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 911.837064][T23728] RIP: 0033:0x45deb9 [ 911.841018][T23728] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 911.860611][T23728] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 911.869124][T23728] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 00:53:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, 0x0) 00:53:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448ce, &(0x7f0000000140)) 00:53:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x40046207, &(0x7f0000000140)) 00:53:36 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x80086301, 0x0) 00:53:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4cce, 0x0) [ 911.877456][T23728] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 911.885439][T23728] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 911.893593][T23728] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 911.901919][T23728] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, 0x0) 00:53:36 executing program 0 (fault-call:0 fault-nth:3): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, &(0x7f0000000140)) [ 912.047820][T23745] FAULT_INJECTION: forcing a failure. [ 912.047820][T23745] name failslab, interval 1, probability 0, space 0, times 0 [ 912.076292][T23745] CPU: 0 PID: 23745 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 912.085256][T23745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.095300][T23745] Call Trace: [ 912.098591][T23745] dump_stack+0x116/0x15d [ 912.102928][T23745] should_fail+0x231/0x240 [ 912.107338][T23745] __should_failslab+0x81/0x90 [ 912.112118][T23745] should_failslab+0x5/0x20 [ 912.116707][T23745] slab_pre_alloc_hook+0x20/0xb0 [ 912.121810][T23745] __kmalloc+0x73/0x2c0 [ 912.125966][T23745] ? io_uring_create+0x42c/0x1ef0 [ 912.130985][T23745] io_uring_create+0x42c/0x1ef0 [ 912.136032][T23745] ? vfs_write+0x54d/0x7c0 [ 912.140444][T23745] __x64_sys_io_uring_setup+0xe1/0x120 [ 912.146880][T23745] do_syscall_64+0x39/0x80 [ 912.151338][T23745] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 912.157230][T23745] RIP: 0033:0x45deb9 [ 912.161119][T23745] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 912.180799][T23745] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 912.189498][T23745] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 00:53:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x541b, 0x0) 00:53:36 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0xc0045878, 0x0) 00:53:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x40049409, &(0x7f0000000140)) 00:53:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, 0x0) 00:53:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, &(0x7f0000000140)) [ 912.198286][T23745] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 912.206534][T23745] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 912.214588][T23745] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 912.223794][T23745] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5421, 0x0) 00:53:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x40186366, &(0x7f0000000140)) 00:53:36 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0xc0045878, 0x0) 00:53:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x40049409, &(0x7f0000000140)) 00:53:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x40049409, 0x0) 00:53:36 executing program 0 (fault-call:0 fault-nth:4): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5450, 0x0) 00:53:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4020940d, &(0x7f0000000140)) 00:53:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x40186366, &(0x7f0000000140)) 00:53:36 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0xc0189436, 0x0) 00:53:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x40186366, 0x0) 00:53:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5451, 0x0) [ 912.497820][T23775] FAULT_INJECTION: forcing a failure. [ 912.497820][T23775] name failslab, interval 1, probability 0, space 0, times 0 [ 912.534868][T23775] CPU: 0 PID: 23775 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 912.543717][T23775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.554306][T23775] Call Trace: [ 912.557591][T23775] dump_stack+0x116/0x15d [ 912.562910][T23775] should_fail+0x231/0x240 [ 912.567339][T23775] __should_failslab+0x81/0x90 [ 912.572111][T23775] should_failslab+0x5/0x20 [ 912.576610][T23775] slab_pre_alloc_hook+0x20/0xb0 [ 912.581628][T23775] kmem_cache_alloc_trace+0x52/0x280 [ 912.587000][T23775] ? percpu_ref_init+0x9e/0x1f0 [ 912.595410][T23775] percpu_ref_init+0x9e/0x1f0 [ 912.600126][T23775] ? io_uring_create+0x1ef0/0x1ef0 [ 912.605378][T23775] io_uring_create+0x46d/0x1ef0 [ 912.610231][T23775] ? vfs_write+0x54d/0x7c0 [ 912.614862][T23775] __x64_sys_io_uring_setup+0xe1/0x120 [ 912.620368][T23775] do_syscall_64+0x39/0x80 [ 912.624799][T23775] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 912.630679][T23775] RIP: 0033:0x45deb9 00:53:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5452, 0x0) 00:53:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x80086301, &(0x7f0000000140)) 00:53:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4020940d, 0x0) [ 912.634952][T23775] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 912.654839][T23775] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 912.663240][T23775] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 912.671772][T23775] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 912.679762][T23775] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 912.687782][T23775] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 00:53:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4020940d, &(0x7f0000000140)) 00:53:37 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0xc020660b, 0x0) [ 912.695747][T23775] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:37 executing program 0 (fault-call:0 fault-nth:5): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:37 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0045878, &(0x7f0000000140)) 00:53:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x5460, 0x0) 00:53:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x80086301, 0x0) 00:53:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x80086301, &(0x7f0000000140)) 00:53:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0045878, 0x0) 00:53:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0045878, &(0x7f0000000140)) 00:53:37 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1a5080, 0x0) socket$isdn(0x22, 0x3, 0x4) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) [ 912.914531][T23808] FAULT_INJECTION: forcing a failure. [ 912.914531][T23808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:53:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0045878, &(0x7f0000000140)) [ 912.996144][T23808] CPU: 1 PID: 23808 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 913.004921][T23808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.014969][T23808] Call Trace: [ 913.018386][T23808] dump_stack+0x116/0x15d [ 913.022813][T23808] should_fail+0x231/0x240 [ 913.027234][T23808] __alloc_pages_nodemask+0xd8/0x350 [ 913.032541][T23808] alloc_pages_current+0x21d/0x310 [ 913.037682][T23808] __get_free_pages+0x8/0x30 [ 913.042265][T23808] io_uring_create+0xd91/0x1ef0 [ 913.047544][T23808] __x64_sys_io_uring_setup+0xe1/0x120 [ 913.053070][T23808] do_syscall_64+0x39/0x80 [ 913.057569][T23808] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.063538][T23808] RIP: 0033:0x45deb9 [ 913.067432][T23808] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.087498][T23808] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 00:53:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0045878, 0x0) [ 913.096247][T23808] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 913.104213][T23808] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 913.112355][T23808] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 913.121355][T23808] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 913.129322][T23808] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:37 executing program 0 (fault-call:0 fault-nth:6): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0189436, 0x0) 00:53:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0045878, &(0x7f0000000140)) 00:53:37 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x501000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x101ff, 0x0, &(0x7f0000ffb000/0x4000)=nil}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x301000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x541b, 0x0) time(&(0x7f00000000c0)) 00:53:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0189436, &(0x7f0000000140)) 00:53:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, 0x0) 00:53:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc020660b, &(0x7f0000000140)) 00:53:37 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x9) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x276171f, 0x3, @discrete={0x7, 0x5}}) write$6lowpan_enable(r4, 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000140)="911ddc6bc96618359cd83b52261c952bc3b439c8276ebe94cffe5b40ca", 0x1d) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f00000000c0)={0xf79e377a, 0x5, 0x5, 0x1000, 0x4, 0x5}) ioctl$RAW_CHAR_CTRL_GETBIND(r3, 0xac01, &(0x7f0000000180)={0x0, 0x7, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') [ 913.256558][T23842] FAULT_INJECTION: forcing a failure. [ 913.256558][T23842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:53:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0189436, &(0x7f0000000140)) 00:53:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8914, 0x0) 00:53:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc020660b, 0x0) 00:53:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) [ 913.346623][T23842] CPU: 0 PID: 23842 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 913.355535][T23842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.365765][T23842] Call Trace: [ 913.369755][T23842] dump_stack+0x116/0x15d [ 913.374079][T23842] should_fail+0x231/0x240 [ 913.379708][T23842] __alloc_pages_nodemask+0xd8/0x350 [ 913.385326][T23842] alloc_pages_current+0x21d/0x310 [ 913.390524][T23842] __get_free_pages+0x8/0x30 [ 913.395483][T23842] io_uring_create+0xeba/0x1ef0 [ 913.400594][T23842] __x64_sys_io_uring_setup+0xe1/0x120 [ 913.406072][T23842] do_syscall_64+0x39/0x80 [ 913.410483][T23842] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.416367][T23842] RIP: 0033:0x45deb9 [ 913.420930][T23842] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.446268][T23842] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 913.455637][T23842] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 913.463599][T23842] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 913.471627][T23842] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 913.480312][T23842] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 913.488543][T23842] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:37 executing program 0 (fault-call:0 fault-nth:7): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8933, 0x0) 00:53:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x2}) 00:53:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc020660b, &(0x7f0000000140)) 00:53:37 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x40581, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1, 0x82800) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x7}) 00:53:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x3}) 00:53:38 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20400, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x101400) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x4, 0x0, 0xe2d2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000240)={0x200, 0x10001, 0xe18, 0x0, 0x101, 0x9, 0x4}) [ 913.627538][T23870] FAULT_INJECTION: forcing a failure. [ 913.627538][T23870] name failslab, interval 1, probability 0, space 0, times 0 00:53:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x89f1, 0x0) 00:53:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x4}) [ 913.688090][T23870] CPU: 0 PID: 23870 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 913.697159][T23870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.707840][T23870] Call Trace: [ 913.711152][T23870] dump_stack+0x116/0x15d [ 913.715485][T23870] should_fail+0x231/0x240 [ 913.722248][T23870] __should_failslab+0x81/0x90 [ 913.728353][T23870] should_failslab+0x5/0x20 [ 913.734642][T23870] slab_pre_alloc_hook+0x20/0xb0 [ 913.739587][T23870] kmem_cache_alloc_trace+0x52/0x280 [ 913.745476][T23870] ? io_wq_create+0x6a/0x4f0 [ 913.750241][T23870] io_wq_create+0x6a/0x4f0 [ 913.754856][T23870] io_uring_create+0xfce/0x1ef0 [ 913.760003][T23870] ? io_free_work+0x330/0x330 [ 913.764851][T23870] ? io_sq_wake_function+0xb0/0xb0 [ 913.769979][T23870] __x64_sys_io_uring_setup+0xe1/0x120 [ 913.775440][T23870] do_syscall_64+0x39/0x80 [ 913.779941][T23870] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.786790][T23870] RIP: 0033:0x45deb9 [ 913.790678][T23870] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.810448][T23870] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 913.818941][T23870] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 913.827091][T23870] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 913.835632][T23870] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 913.843662][T23870] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 913.851688][T23870] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:38 executing program 0 (fault-call:0 fault-nth:8): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa0101, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x3, 0x2, 0x3, 0x101, 0x9, 0xf18f}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x5}) 00:53:38 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x7) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x2}) 00:53:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, 0x0) 00:53:38 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20301, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x1) 00:53:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x3}) 00:53:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448dd, 0x0) [ 913.985410][T23901] FAULT_INJECTION: forcing a failure. [ 913.985410][T23901] name failslab, interval 1, probability 0, space 0, times 0 00:53:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x6}) [ 914.040743][T23901] CPU: 0 PID: 23901 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 914.049531][T23901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.059789][T23901] Call Trace: [ 914.063088][T23901] dump_stack+0x116/0x15d [ 914.067431][T23901] should_fail+0x231/0x240 [ 914.071926][T23901] __should_failslab+0x81/0x90 [ 914.076684][T23901] should_failslab+0x5/0x20 [ 914.081388][T23901] slab_pre_alloc_hook+0x20/0xb0 [ 914.086575][T23901] __kmalloc+0x73/0x2c0 [ 914.091149][T23901] ? io_wq_create+0x92/0x4f0 [ 914.095739][T23901] io_wq_create+0x92/0x4f0 [ 914.100190][T23901] io_uring_create+0xfce/0x1ef0 [ 914.105039][T23901] ? io_free_work+0x330/0x330 [ 914.109715][T23901] ? io_sq_wake_function+0xb0/0xb0 [ 914.114911][T23901] __x64_sys_io_uring_setup+0xe1/0x120 [ 914.120367][T23901] do_syscall_64+0x39/0x80 [ 914.125552][T23901] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 914.131811][T23901] RIP: 0033:0x45deb9 00:53:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400454ca, 0x0) [ 914.135775][T23901] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 914.156001][T23901] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 914.165019][T23901] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 914.173019][T23901] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 914.181075][T23901] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 00:53:38 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x541b, 0x0) [ 914.189128][T23901] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 914.197815][T23901] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:38 executing program 0 (fault-call:0 fault-nth:9): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x40049409, 0x0) 00:53:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x4}) 00:53:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x7}) 00:53:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3ff, 0x64502) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:38 executing program 5: userfaultfd(0x80000) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x161000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x460000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000180)={0x6, 0x5, 0x6}) write$qrtrtun(r1, &(0x7f0000000080)="c75bf34dac0889752cc655d45597397ade31e095f220156bb9a0fcd92a0ed9bced4df0e92a19a83c357c66ff30efcae99989c20fa6d60679ba802c59d4b909e2636375f877deb898a36b87ed6434467871b9449f228f73a36d013baf3ceb9e55cdf19f22c59f8c0e49441431752aa53595109d1e680e40130e4fe048fcd485bfef1dd8f6997a2bcec28b", 0x8a) [ 914.378223][T23930] FAULT_INJECTION: forcing a failure. [ 914.378223][T23930] name failslab, interval 1, probability 0, space 0, times 0 [ 914.422865][T23930] CPU: 1 PID: 23930 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 914.431643][T23930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.441721][T23930] Call Trace: [ 914.445066][T23930] dump_stack+0x116/0x15d [ 914.449393][T23930] should_fail+0x231/0x240 [ 914.453808][T23930] __should_failslab+0x81/0x90 [ 914.458599][T23930] should_failslab+0x5/0x20 [ 914.463098][T23930] slab_pre_alloc_hook+0x20/0xb0 [ 914.468286][T23930] kmem_cache_alloc_node_trace+0x61/0x240 [ 914.474042][T23930] ? io_wq_create+0x1e7/0x4f0 [ 914.479081][T23930] io_wq_create+0x1e7/0x4f0 [ 914.483577][T23930] io_uring_create+0xfce/0x1ef0 [ 914.488768][T23930] ? io_free_work+0x330/0x330 [ 914.493552][T23930] ? io_sq_wake_function+0xb0/0xb0 [ 914.498761][T23930] __x64_sys_io_uring_setup+0xe1/0x120 [ 914.504337][T23930] do_syscall_64+0x39/0x80 [ 914.508757][T23930] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 914.514745][T23930] RIP: 0033:0x45deb9 [ 914.518758][T23930] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 914.539936][T23930] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 914.548354][T23930] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 914.556586][T23930] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 914.564555][T23930] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 00:53:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7f, 0x404080) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x5}) 00:53:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x8}) 00:53:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x40186366, 0x0) 00:53:38 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000180)=""/176, 0xb0}, {&(0x7f0000000240)=""/209, 0xd1}], 0x4, &(0x7f0000000380)=""/48, 0x30}, 0x40) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) socketpair(0x1a, 0xa, 0x7f, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2711}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0xb, 0x5, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x92, &(0x7f0000000100)=""/146, 0x41000, 0x11, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xf, 0x1, 0x400}, 0x10, 0x12ba6}, 0x78) [ 914.572523][T23930] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 914.580487][T23930] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:39 executing program 0 (fault-call:0 fault-nth:10): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x501000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x9}) 00:53:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x6}) 00:53:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4020940d, 0x0) 00:53:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x7}) 00:53:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x141300, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0xfffffffffffffffc) 00:53:39 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r2}, 0x10) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 00:53:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xa}) 00:53:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x80086301, 0x0) [ 914.742634][T23959] FAULT_INJECTION: forcing a failure. [ 914.742634][T23959] name failslab, interval 1, probability 0, space 0, times 0 00:53:39 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) [ 914.817200][T23959] CPU: 1 PID: 23959 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 914.826267][T23959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.837625][T23959] Call Trace: [ 914.841512][T23959] dump_stack+0x116/0x15d [ 914.846634][T23959] should_fail+0x231/0x240 [ 914.851056][T23959] __should_failslab+0x81/0x90 [ 914.855899][T23959] should_failslab+0x5/0x20 [ 914.860468][T23959] slab_pre_alloc_hook+0x20/0xb0 [ 914.865398][T23959] kmem_cache_alloc_node_trace+0x61/0x240 [ 914.871662][T23959] ? io_wq_create+0x1e7/0x4f0 [ 914.876343][T23959] io_wq_create+0x1e7/0x4f0 [ 914.881188][T23959] io_uring_create+0xfce/0x1ef0 [ 914.887100][T23959] ? io_free_work+0x330/0x330 [ 914.891867][T23959] ? io_sq_wake_function+0xb0/0xb0 [ 914.897563][T23959] __x64_sys_io_uring_setup+0xe1/0x120 [ 914.903122][T23959] do_syscall_64+0x39/0x80 [ 914.907625][T23959] entry_SYSCALL_64_after_hwframe+0x44/0xa9 00:53:39 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) [ 914.913915][T23959] RIP: 0033:0x45deb9 [ 914.918727][T23959] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 914.939951][T23959] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 914.948366][T23959] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 914.956336][T23959] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 914.965524][T23959] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 914.973865][T23959] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 914.981849][T23959] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:39 executing program 0 (fault-call:0 fault-nth:11): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:39 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000200)={0x600, 0x8, &(0x7f0000000100)=[0x5, 0x4, 0x7f4, 0x7f, 0x2d6, 0x9, 0x5, 0xffff5343], &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=[0x8, 0x4, 0x0, 0xe70a], 0x0, 0xfff}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x100, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0xc00, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0xea22, 0x1, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000380)) 00:53:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x8}) 00:53:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xb}) 00:53:39 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) 00:53:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0045878, 0x0) 00:53:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xc}) 00:53:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x9}) [ 915.092056][T23988] FAULT_INJECTION: forcing a failure. [ 915.092056][T23988] name failslab, interval 1, probability 0, space 0, times 0 00:53:39 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x1400) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x541b, 0x0) [ 915.142521][T23988] CPU: 0 PID: 23988 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 915.151512][T23988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.161564][T23988] Call Trace: [ 915.164869][T23988] dump_stack+0x116/0x15d [ 915.169220][T23988] should_fail+0x231/0x240 [ 915.173636][T23988] __should_failslab+0x81/0x90 [ 915.178403][T23988] should_failslab+0x5/0x20 [ 915.182907][T23988] slab_pre_alloc_hook+0x20/0xb0 [ 915.187902][T23988] ? io_wq_create+0x4f0/0x4f0 00:53:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xd}) [ 915.192574][T23988] kmem_cache_alloc_trace+0x52/0x280 [ 915.197873][T23988] ? __kthread_create_on_node+0x7a/0x270 [ 915.203506][T23988] ? io_wq_create+0x4f0/0x4f0 [ 915.208184][T23988] __kthread_create_on_node+0x7a/0x270 [ 915.213638][T23988] ? should_fail+0xd6/0x240 [ 915.218132][T23988] ? _raw_spin_unlock+0x22/0x40 [ 915.223018][T23988] ? ____cache_alloc_node+0x15d/0x210 [ 915.228430][T23988] ? io_wq_create+0x4f0/0x4f0 [ 915.233114][T23988] kthread_create_on_node+0x72/0xa0 [ 915.238308][T23988] ? io_wq_create+0x1e7/0x4f0 00:53:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xe}) [ 915.243001][T23988] io_wq_create+0x38d/0x4f0 [ 915.247500][T23988] io_uring_create+0xfce/0x1ef0 [ 915.252456][T23988] ? io_free_work+0x330/0x330 [ 915.257127][T23988] ? io_sq_wake_function+0xb0/0xb0 [ 915.262235][T23988] __x64_sys_io_uring_setup+0xe1/0x120 [ 915.267878][T23988] do_syscall_64+0x39/0x80 [ 915.272367][T23988] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 915.278253][T23988] RIP: 0033:0x45deb9 [ 915.282150][T23988] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 915.301745][T23988] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 915.310153][T23988] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 915.318121][T23988] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 915.326243][T23988] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 915.334207][T23988] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 00:53:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x10}) [ 915.342249][T23988] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:39 executing program 0 (fault-call:0 fault-nth:12): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0x60000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0045878, 0x0) 00:53:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xa}) 00:53:39 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x202000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/87}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x11}) 00:53:39 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x34643, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000080)={0x2001, 0xb4, 0x4, 0x1b}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0189436, 0x0) 00:53:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x50bc01) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x4002c0) 00:53:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xb}) [ 915.537935][T24019] FAULT_INJECTION: forcing a failure. [ 915.537935][T24019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.604057][T24019] CPU: 1 PID: 24019 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 915.612836][T24019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.622888][T24019] Call Trace: [ 915.626177][T24019] dump_stack+0x116/0x15d [ 915.630559][T24019] should_fail+0x231/0x240 [ 915.634980][T24019] should_fail_usercopy+0x16/0x20 [ 915.640076][T24019] _copy_to_user+0x1c/0x90 [ 915.644487][T24019] io_uring_create+0x1a03/0x1ef0 [ 915.649420][T24019] ? io_free_work+0x330/0x330 [ 915.654083][T24019] ? io_sq_wake_function+0xb0/0xb0 [ 915.659188][T24019] __x64_sys_io_uring_setup+0xe1/0x120 [ 915.664682][T24019] do_syscall_64+0x39/0x80 [ 915.669101][T24019] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 915.674982][T24019] RIP: 0033:0x45deb9 [ 915.678919][T24019] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc020660b, 0x0) 00:53:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xc}) [ 915.698715][T24019] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 915.707133][T24019] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 915.715106][T24019] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 915.723238][T24019] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 915.731239][T24019] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 915.739249][T24019] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:40 executing program 0 (fault-call:0 fault-nth:13): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e25}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xe64f}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x30000800}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180)={0x2}, 0x4) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb, 0x100010, 0xffffffffffffffff, 0x1) 00:53:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x12}) 00:53:40 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) 00:53:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xd}) 00:53:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xe}) 00:53:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x25}) 00:53:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x100, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x6, 0x6c92, 0x2, 0x0, r1}) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000100)={0x0, 0x2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:40 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x22040, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000040)=0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x1}) r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x40000) bind$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8) socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000100)) [ 915.890196][T24054] FAULT_INJECTION: forcing a failure. [ 915.890196][T24054] name failslab, interval 1, probability 0, space 0, times 0 00:53:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x10}) [ 915.960847][T24054] CPU: 0 PID: 24054 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 915.969619][T24054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.979665][T24054] Call Trace: [ 915.982969][T24054] dump_stack+0x116/0x15d [ 915.987316][T24054] should_fail+0x231/0x240 [ 915.991741][T24054] __should_failslab+0x81/0x90 [ 915.996512][T24054] should_failslab+0x5/0x20 [ 916.001725][T24054] slab_pre_alloc_hook+0x20/0xb0 00:53:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x11}) [ 916.006723][T24054] ? sockfs_init_fs_context+0x70/0x70 [ 916.012729][T24054] kmem_cache_alloc+0x4d/0x280 [ 916.018457][T24054] ? sock_alloc_inode+0x23/0x90 [ 916.023334][T24054] ? apparmor_socket_create+0x355/0x3a0 [ 916.029021][T24054] ? sockfs_init_fs_context+0x70/0x70 [ 916.037319][T24054] sock_alloc_inode+0x23/0x90 [ 916.042115][T24054] ? sockfs_init_fs_context+0x70/0x70 [ 916.047489][T24054] new_inode_pseudo+0x38/0x1a0 [ 916.052260][T24054] __sock_create+0x122/0x4f0 [ 916.056850][T24054] ? should_fail+0xd6/0x240 [ 916.062285][T24054] sock_create_kern+0x34/0x40 [ 916.066966][T24054] io_uring_create+0x1a49/0x1ef0 [ 916.072009][T24054] ? io_free_work+0x330/0x330 [ 916.077409][T24054] ? io_sq_wake_function+0xb0/0xb0 [ 916.082530][T24054] __x64_sys_io_uring_setup+0xe1/0x120 [ 916.089855][T24054] do_syscall_64+0x39/0x80 [ 916.094298][T24054] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.100194][T24054] RIP: 0033:0x45deb9 [ 916.104167][T24054] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 916.123767][T24054] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 916.132622][T24054] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 916.140601][T24054] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 916.148666][T24054] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 00:53:40 executing program 0 (fault-call:0 fault-nth:14): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x12}) 00:53:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x5c}) 00:53:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x800, 0x1, 0x4b, 0x1}, {0x7, 0x2, 0x6, 0x180}]}, 0x10) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 916.156838][T24054] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 916.164802][T24054] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 [ 916.195247][T24054] socket: no more sockets 00:53:40 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f00000000c0), 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 00:53:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x2a000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x300}) 00:53:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x25}) [ 916.324707][T24087] FAULT_INJECTION: forcing a failure. [ 916.324707][T24087] name failslab, interval 1, probability 0, space 0, times 0 [ 916.386982][T24087] CPU: 1 PID: 24087 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 916.395803][T24087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.405853][T24087] Call Trace: [ 916.409178][T24087] dump_stack+0x116/0x15d [ 916.413505][T24087] should_fail+0x231/0x240 [ 916.417930][T24087] __should_failslab+0x81/0x90 [ 916.422695][T24087] should_failslab+0x5/0x20 [ 916.427197][T24087] slab_pre_alloc_hook+0x20/0xb0 [ 916.432224][T24087] kmem_cache_alloc+0x4d/0x280 [ 916.437023][T24087] ? security_inode_alloc+0x2e/0x170 [ 916.442302][T24087] ? slab_pre_alloc_hook+0x20/0xb0 [ 916.447412][T24087] security_inode_alloc+0x2e/0x170 [ 916.452581][T24087] inode_init_always+0x211/0x430 [ 916.457518][T24087] ? sockfs_init_fs_context+0x70/0x70 [ 916.462962][T24087] new_inode_pseudo+0x6f/0x1a0 [ 916.467791][T24087] __sock_create+0x122/0x4f0 [ 916.472378][T24087] ? should_fail+0xd6/0x240 [ 916.476874][T24087] sock_create_kern+0x34/0x40 [ 916.481616][T24087] io_uring_create+0x1a49/0x1ef0 [ 916.486555][T24087] ? io_free_work+0x330/0x330 [ 916.491224][T24087] ? io_sq_wake_function+0xb0/0xb0 [ 916.496345][T24087] __x64_sys_io_uring_setup+0xe1/0x120 [ 916.501803][T24087] do_syscall_64+0x39/0x80 [ 916.506227][T24087] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.512241][T24087] RIP: 0033:0x45deb9 [ 916.516138][T24087] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0xfffffffffffffea3) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000140)="9ab5a248e6501b1013adc79fa43c7e1f647b4c9ef148ff6402fef3569aafd2033de698fbf5139082c5688f262dd88e60da021ec2343727be3e206d7ee0ea3a98286e51a2b6c446d8e58af2b199f15067fa9e7d0efecb4dbf278ca6eea1fab45405470ada300f22b5fd023c9875230f60246efe2e8ffd607b995610fadb69bbd0cf4137daa40fa64d1794e93755d3fe51b7df7511bde949b9d2acc2d1f9329b66b44461b16b503d0ae5783a76349dbeec24d7", 0xb2) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000100)="754db4b7", 0x4) accept$packet(r1, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000008c0)=0x14) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r4 = accept4(r1, 0x0, &(0x7f0000000200), 0x0) sendto$packet(r4, &(0x7f0000000080)="7beaab7a63db91f21a8ff894c037d6cbefd300f7149010aa3798782e06bd84d1577b321db15c22ceabd8", 0x2a, 0x5, &(0x7f0000000240)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @multicast}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000380)={r6, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r8, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r8, 0x0, 0x1, &(0x7f00000003c0), 0x4) write$6lowpan_enable(r7, 0x0, 0x0) accept4$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', r9, 0x29, 0x8, 0x1, 0xffff8000, 0x44, @dev={0xfe, 0x80, [], 0x1d}, @loopback, 0x80, 0x80, 0xb05e, 0x8}}) 00:53:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x10280) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xe07, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x8, r2}) 00:53:40 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x3f, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={r2, &(0x7f0000000080)=""/67}) [ 916.535742][T24087] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 916.544152][T24087] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 916.552135][T24087] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 916.560105][T24087] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 916.568069][T24087] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 916.576032][T24087] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:41 executing program 0 (fault-call:0 fault-nth:15): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1d, 0x7568c0ca0645391d) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x500}) 00:53:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={r1, 0x18}) 00:53:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x5c}) 00:53:41 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) [ 916.660904][T24087] socket: no more sockets 00:53:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x4c2841) r1 = io_uring_setup(0x2116, &(0x7f00000002c0)={0x0, 0xc6b, 0x0, 0x1, 0x1d2}) r2 = syz_io_uring_setup(0x6c42, &(0x7f00000000c0)={0x0, 0x29ad, 0x8, 0x1, 0x2d8, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000180)) syz_io_uring_setup(0x770d, &(0x7f00000001c0)={0x0, 0xc72d, 0x93ac10272b591509, 0x3, 0x2c, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400, 0x620240) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x300}) 00:53:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x600}) 00:53:41 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000001c0)={0x1, 0x4, 0x800, 0xc2d, 0xa, 0x4}) syz_io_uring_setup(0x17da, &(0x7f0000000080)={0x0, 0x9648, 0x23c1b46d78171f72, 0x3, 0x195, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0x1, 0x0, 0x2}, 0x8000) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x5}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x800000, 0x200800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r1, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) [ 916.803691][T24129] FAULT_INJECTION: forcing a failure. [ 916.803691][T24129] name failslab, interval 1, probability 0, space 0, times 0 [ 916.860537][T24129] CPU: 0 PID: 24129 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 916.870314][T24129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.880715][T24129] Call Trace: [ 916.884420][T24129] dump_stack+0x116/0x15d [ 916.888752][T24129] should_fail+0x231/0x240 [ 916.893243][T24129] __should_failslab+0x81/0x90 [ 916.898022][T24129] should_failslab+0x5/0x20 [ 916.902521][T24129] slab_pre_alloc_hook+0x20/0xb0 [ 916.907458][T24129] kmem_cache_alloc+0x4d/0x280 [ 916.912322][T24129] ? sk_prot_alloc+0x3f/0x190 [ 916.917070][T24129] ? __should_failslab+0x81/0x90 [ 916.922010][T24129] sk_prot_alloc+0x3f/0x190 [ 916.926507][T24129] sk_alloc+0x2e/0x480 [ 916.930582][T24129] unix_create1+0x74/0x3a0 [ 916.935005][T24129] unix_create+0xdc/0x100 [ 916.939355][T24129] __sock_create+0x2cc/0x4f0 [ 916.943943][T24129] sock_create_kern+0x34/0x40 [ 916.948621][T24129] io_uring_create+0x1a49/0x1ef0 [ 916.953661][T24129] ? io_free_work+0x330/0x330 00:53:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x101280) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x2010}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 916.958332][T24129] ? io_sq_wake_function+0xb0/0xb0 [ 916.963434][T24129] __x64_sys_io_uring_setup+0xe1/0x120 [ 916.968895][T24129] do_syscall_64+0x39/0x80 [ 916.973312][T24129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.979197][T24129] RIP: 0033:0x45deb9 [ 916.983083][T24129] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.002693][T24129] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 917.011177][T24129] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 917.019175][T24129] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 917.027155][T24129] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 917.035212][T24129] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 917.043213][T24129] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:41 executing program 0 (fault-call:0 fault-nth:16): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:41 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x28202) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x201) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) 00:53:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x500}) 00:53:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80001, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6, 0x4, 0x0, 0x3}) 00:53:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x700}) 00:53:41 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) 00:53:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x600}) 00:53:41 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000005080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000050c0)=0x14) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000040)="13f391b2f0637593ba2b64b1d301098c7bdfa51877e6c01fb023630860bcf8f6aec2ca1ee0f70a5054fbbb224eb022", 0x2f, 0xc010, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}, 0x48) bind$can_raw(0xffffffffffffffff, &(0x7f0000005100)={0x1d, r2}, 0x10) 00:53:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x900}) 00:53:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x6, 0x8, 0xffff, 0xcccccccc}) 00:53:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x20d1d0, 0x52882) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x68a800, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x57b, 0xa, 0x400000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) [ 917.221157][T24171] FAULT_INJECTION: forcing a failure. [ 917.221157][T24171] name failslab, interval 1, probability 0, space 0, times 0 [ 917.293519][T24171] CPU: 0 PID: 24171 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 917.303375][T24171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.313428][T24171] Call Trace: [ 917.316753][T24171] dump_stack+0x116/0x15d [ 917.321081][T24171] should_fail+0x231/0x240 [ 917.325550][T24171] __should_failslab+0x81/0x90 [ 917.330337][T24171] should_failslab+0x5/0x20 [ 917.334862][T24171] slab_pre_alloc_hook+0x20/0xb0 00:53:41 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x243, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) [ 917.340149][T24171] kmem_cache_alloc_trace+0x52/0x280 [ 917.345434][T24171] ? apparmor_sk_alloc_security+0x70/0xb0 [ 917.351155][T24171] apparmor_sk_alloc_security+0x70/0xb0 [ 917.356702][T24171] security_sk_alloc+0x45/0x90 [ 917.361967][T24171] sk_prot_alloc+0xf0/0x190 [ 917.366518][T24171] sk_alloc+0x2e/0x480 [ 917.370590][T24171] unix_create1+0x74/0x3a0 [ 917.375913][T24171] unix_create+0xdc/0x100 [ 917.380252][T24171] __sock_create+0x2cc/0x4f0 [ 917.384954][T24171] sock_create_kern+0x34/0x40 [ 917.389970][T24171] io_uring_create+0x1a49/0x1ef0 [ 917.394917][T24171] ? io_free_work+0x330/0x330 [ 917.399650][T24171] ? io_sq_wake_function+0xb0/0xb0 [ 917.404763][T24171] __x64_sys_io_uring_setup+0xe1/0x120 [ 917.411168][T24171] do_syscall_64+0x39/0x80 [ 917.415633][T24171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 917.421691][T24171] RIP: 0033:0x45deb9 [ 917.425586][T24171] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.445239][T24171] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 917.453689][T24171] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 917.461691][T24171] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 917.470159][T24171] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 917.478130][T24171] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 917.486096][T24171] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:41 executing program 0 (fault-call:0 fault-nth:17): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x700}) 00:53:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xa00}) 00:53:41 executing program 5: ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0x2) clock_gettime(0x6, &(0x7f0000000040)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:41 executing program 4: socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x1, 0x1, 0x20, 0x84000}) time(0x0) clock_getres(0x3, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/222, 0xde}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/252, 0xfc}, {&(0x7f0000000640)=""/80, 0x50}, {&(0x7f00000006c0)=""/44, 0x2c}], 0x9, &(0x7f00000007c0)=""/139, 0x8b}, 0x20) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x8, 0x2, 0x2, "02a5097bf9ec057e96da2070ab76006997e9f3463dac006e42a1e4fafc06fed1", 0x20385655}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) 00:53:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xb00}) 00:53:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x2649e234403fc18e) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000000)) 00:53:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x900}) 00:53:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80000) [ 917.684698][T24213] FAULT_INJECTION: forcing a failure. [ 917.684698][T24213] name failslab, interval 1, probability 0, space 0, times 0 [ 917.722088][T24213] CPU: 0 PID: 24213 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 917.730876][T24213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.740924][T24213] Call Trace: [ 917.744206][T24213] dump_stack+0x116/0x15d [ 917.748610][T24213] should_fail+0x231/0x240 [ 917.753034][T24213] __should_failslab+0x81/0x90 [ 917.757966][T24213] should_failslab+0x5/0x20 [ 917.762502][T24213] slab_pre_alloc_hook+0x20/0xb0 [ 917.767445][T24213] kmem_cache_alloc+0x4d/0x280 [ 917.772211][T24213] ? __d_alloc+0x36/0x370 [ 917.776539][T24213] ? prandom_u32_state+0x9/0x80 00:53:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xc00}) [ 917.781434][T24213] __d_alloc+0x36/0x370 [ 917.785667][T24213] d_alloc_pseudo+0x1a/0x50 [ 917.790303][T24213] alloc_file_pseudo+0x63/0x130 [ 917.795152][T24213] ? __alloc_fd+0x33c/0x390 [ 917.799659][T24213] anon_inode_getfile+0xc8/0x160 [ 917.804636][T24213] io_uring_create+0x1a9b/0x1ef0 [ 917.809588][T24213] ? io_free_work+0x330/0x330 [ 917.814249][T24213] ? io_sq_wake_function+0xb0/0xb0 [ 917.819351][T24213] __x64_sys_io_uring_setup+0xe1/0x120 [ 917.824811][T24213] do_syscall_64+0x39/0x80 [ 917.829253][T24213] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 917.835137][T24213] RIP: 0033:0x45deb9 [ 917.839020][T24213] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.858615][T24213] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 917.867016][T24213] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 917.874985][T24213] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab 00:53:42 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x60ed80, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) clock_getres(0x2, &(0x7f0000000080)) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x7fffffff}) [ 917.883032][T24213] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 917.891111][T24213] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 917.899076][T24213] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:42 executing program 0 (fault-call:0 fault-nth:18): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x800000000000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0xb23f227c8cee53f6, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="f36e0f01d1baf80c66b84848888266efbafc0c66b80000008066ef0f0933e8650f3566b9dc0800000f32baf80c66b80535358466efbafc0cb023eec641eb002e0f01c2", 0x43}], 0x1, 0x25, &(0x7f0000000100)=[@flags={0x3, 0x4a184}], 0x1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000140)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 00:53:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xa00}) 00:53:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xd00}) 00:53:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 00:53:42 executing program 5: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x541b, 0x0) 00:53:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xb00}) 00:53:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400000000000, 0x301140) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x7, 0xb46, 0x1, 0x338], &(0x7f0000000080)=[0x3, 0x3ff, 0x3, 0x10001, 0xb98, 0x7, 0x1000, 0x8], &(0x7f00000000c0)=[0x400, 0xfffffffc, 0x2, 0x1ff], &(0x7f0000000100)=[0x9], 0x0, 0xffffffff00000000}) 00:53:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xe00}) [ 918.045500][T24250] FAULT_INJECTION: forcing a failure. [ 918.045500][T24250] name failslab, interval 1, probability 0, space 0, times 0 00:53:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000001, 0x201) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 918.089190][T24250] CPU: 0 PID: 24250 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 918.097962][T24250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.108221][T24250] Call Trace: [ 918.111605][T24250] dump_stack+0x116/0x15d [ 918.115941][T24250] should_fail+0x231/0x240 [ 918.120347][T24250] __should_failslab+0x81/0x90 [ 918.125106][T24250] should_failslab+0x5/0x20 [ 918.129606][T24250] slab_pre_alloc_hook+0x20/0xb0 [ 918.134588][T24250] kmem_cache_alloc+0x4d/0x280 00:53:42 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil}) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x92c40, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)=0x8) [ 918.139344][T24250] ? __alloc_file+0x2e/0x1f0 [ 918.143934][T24250] __alloc_file+0x2e/0x1f0 [ 918.148343][T24250] alloc_empty_file+0xcd/0x1c0 [ 918.153108][T24250] alloc_file+0x3a/0x280 [ 918.157351][T24250] alloc_file_pseudo+0xe2/0x130 [ 918.162207][T24250] anon_inode_getfile+0xc8/0x160 [ 918.167510][T24250] io_uring_create+0x1a9b/0x1ef0 [ 918.172576][T24250] ? io_free_work+0x330/0x330 [ 918.177278][T24250] ? io_sq_wake_function+0xb0/0xb0 [ 918.182387][T24250] __x64_sys_io_uring_setup+0xe1/0x120 00:53:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x401, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 918.188711][T24250] do_syscall_64+0x39/0x80 [ 918.194137][T24250] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 918.200026][T24250] RIP: 0033:0x45deb9 [ 918.204297][T24250] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.224393][T24250] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 918.232823][T24250] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 918.240794][T24250] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 918.248769][T24250] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 918.257122][T24250] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 918.265095][T24250] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:42 executing program 0 (fault-call:0 fault-nth:19): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:42 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x1de842, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xc00}) 00:53:42 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) 00:53:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x1100}) 00:53:42 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x1b1000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:42 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xd7, 0x2) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0xfffffc00, 0x1ff, 0x5, 0x4, 0xa, 0x7}) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000280)={r3}) r4 = accept4(r2, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000200)=0x80, 0x800) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 00:53:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xd00}) 00:53:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={0x0, 0x2}) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x7, 0x1, 0x64, 0x80}, 0x6) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 918.452007][T24284] FAULT_INJECTION: forcing a failure. [ 918.452007][T24284] name failslab, interval 1, probability 0, space 0, times 0 [ 918.487203][T24284] CPU: 0 PID: 24284 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 00:53:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) clock_gettime(0x0, &(0x7f0000000000)) [ 918.495982][T24284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.506043][T24284] Call Trace: [ 918.509341][T24284] dump_stack+0x116/0x15d [ 918.513673][T24284] should_fail+0x231/0x240 [ 918.518109][T24284] __should_failslab+0x81/0x90 [ 918.523269][T24284] should_failslab+0x5/0x20 [ 918.528797][T24284] slab_pre_alloc_hook+0x20/0xb0 [ 918.534506][T24284] kmem_cache_alloc+0x4d/0x280 [ 918.539346][T24284] ? security_file_alloc+0x2e/0x190 [ 918.544540][T24284] ? kmem_cache_alloc+0x11a/0x280 00:53:42 executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/207, 0xcf}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000640)=""/2, 0x2}], 0xa, &(0x7f0000000740)=""/179, 0xb3}, 0x10) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000840)="5deace428dd8c9b70c6d4c726f1b149628572238f0ae6354ae1fbe5f2948063ab9529eb4297093635d9645bf68e434230f87a62d7822607fed27", 0x3a) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000880)={0x7}) [ 918.549559][T24284] security_file_alloc+0x2e/0x190 [ 918.555461][T24284] __alloc_file+0x83/0x1f0 [ 918.559876][T24284] alloc_empty_file+0xcd/0x1c0 [ 918.564640][T24284] alloc_file+0x3a/0x280 [ 918.568886][T24284] alloc_file_pseudo+0xe2/0x130 [ 918.573747][T24284] anon_inode_getfile+0xc8/0x160 [ 918.578687][T24284] io_uring_create+0x1a9b/0x1ef0 [ 918.583621][T24284] ? io_free_work+0x330/0x330 [ 918.588291][T24284] ? io_sq_wake_function+0xb0/0xb0 [ 918.593529][T24284] __x64_sys_io_uring_setup+0xe1/0x120 [ 918.599412][T24284] do_syscall_64+0x39/0x80 [ 918.603948][T24284] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 918.609902][T24284] RIP: 0033:0x45deb9 [ 918.613791][T24284] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.633480][T24284] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 918.641887][T24284] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 00:53:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4000, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 918.649858][T24284] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 918.657998][T24284] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 918.666971][T24284] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 918.674942][T24284] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:43 executing program 0 (fault-call:0 fault-nth:20): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x1200}) 00:53:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xe00}) 00:53:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x1, 0x3, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0xff, 0x6, 0x4, 0x70000, 0x2, {}, {0x5, 0x0, 0x40, 0xef, 0x2, 0x16, "da149541"}, 0x45, 0x2, @fd, 0x80, 0x0, r2}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x7, 0xa5, 0x9, 0xd247}, {0x62a1, 0x2, 0x5, 0x5}, {0x9, 0x80, 0x7f, 0x80000000}]}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000001c0)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="dd91a79f023033c9060620"], 0x2c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) 00:53:43 executing program 5: socketpair(0x29, 0x6, 0x7fffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0xd5, 0xe9, 0x81, 0x39, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7, 0x5, 0x9}}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x541b, 0x0) 00:53:43 executing program 3: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x272e80) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:43 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x240, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x2500}) 00:53:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) [ 918.895401][T24327] FAULT_INJECTION: forcing a failure. [ 918.895401][T24327] name failslab, interval 1, probability 0, space 0, times 0 00:53:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x1100}) [ 918.942625][T24327] CPU: 0 PID: 24327 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 918.951422][T24327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.961471][T24327] Call Trace: [ 918.964761][T24327] dump_stack+0x116/0x15d [ 918.969090][T24327] should_fail+0x231/0x240 [ 918.973504][T24327] __should_failslab+0x81/0x90 [ 918.978307][T24327] should_failslab+0x5/0x20 [ 918.982825][T24327] slab_pre_alloc_hook+0x20/0xb0 [ 918.987753][T24327] kmem_cache_alloc_trace+0x52/0x280 00:53:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x5c00}) [ 918.993036][T24327] ? io_uring_alloc_task_context+0x34/0x2d0 [ 918.998954][T24327] io_uring_alloc_task_context+0x34/0x2d0 [ 919.004689][T24327] io_uring_create+0x1e12/0x1ef0 [ 919.009652][T24327] ? io_free_work+0x330/0x330 [ 919.014327][T24327] ? io_sq_wake_function+0xb0/0xb0 [ 919.019506][T24327] __x64_sys_io_uring_setup+0xe1/0x120 [ 919.024969][T24327] do_syscall_64+0x39/0x80 [ 919.029380][T24327] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 919.035265][T24327] RIP: 0033:0x45deb9 00:53:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x1200}) [ 919.039155][T24327] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 919.058857][T24327] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 919.067311][T24327] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 919.075320][T24327] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 919.083286][T24327] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 919.091267][T24327] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 919.099304][T24327] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:43 executing program 0 (fault-call:0 fault-nth:21): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) socket$isdn(0x22, 0x3, 0x26) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x2500}) 00:53:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x1000000}) 00:53:43 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="1164d4a2385dfb0d10fa3a0a57173e12951e8dbc586ab73b2bb188c85a6fe7a53bda1b7078d9e2629ec2112e08664ba2", 0x30, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r1}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x541b, 0x0) 00:53:43 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)={'a', ' *:* ', 'rwm\x00'}, 0xa) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x40800) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="7411ab", 0x3) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x100, 0x480cc0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000100)=0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000040)=0x100000) 00:53:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x5c00}) 00:53:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x2000000}) 00:53:43 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000001100)=""/15, &(0x7f0000001140)=0xf) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10000, 0x82) sendto$unix(r1, &(0x7f0000000100)="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", 0x1000, 0x8844, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$DRM_IOCTL_RM_CTX(r2, 0x6364, 0x0) [ 919.273999][T24361] FAULT_INJECTION: forcing a failure. [ 919.273999][T24361] name failslab, interval 1, probability 0, space 0, times 0 [ 919.287351][T24361] CPU: 0 PID: 24361 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 919.296693][T24361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.307529][T24361] Call Trace: [ 919.310828][T24361] dump_stack+0x116/0x15d [ 919.315157][T24361] should_fail+0x231/0x240 [ 919.319567][T24361] __should_failslab+0x81/0x90 [ 919.324323][T24361] should_failslab+0x5/0x20 [ 919.328822][T24361] slab_pre_alloc_hook+0x20/0xb0 [ 919.333752][T24361] kmem_cache_alloc+0x4d/0x280 [ 919.338627][T24361] ? xas_create+0x97b/0xba0 [ 919.343139][T24361] ? pcpu_chunk_relocate+0xe4/0x2e0 [ 919.348990][T24361] xas_create+0x97b/0xba0 [ 919.353343][T24361] xas_store+0x73/0xcb0 [ 919.357650][T24361] ? pcpu_alloc+0xfd8/0x1020 [ 919.362977][T24361] __xa_store+0xcb/0x320 [ 919.367233][T24361] xa_store+0x30/0x50 [ 919.371899][T24361] io_uring_create+0x1c33/0x1ef0 [ 919.376904][T24361] ? io_free_work+0x330/0x330 [ 919.382160][T24361] ? io_sq_wake_function+0xb0/0xb0 [ 919.387279][T24361] __x64_sys_io_uring_setup+0xe1/0x120 [ 919.392755][T24361] do_syscall_64+0x39/0x80 [ 919.397988][T24361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 919.403896][T24361] RIP: 0033:0x45deb9 00:53:43 executing program 3: socket$isdn(0x22, 0x3, 0x35) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 919.408844][T24361] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 919.428544][T24361] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 919.436954][T24361] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 919.444926][T24361] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 919.452893][T24361] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 919.460858][T24361] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 919.468830][T24361] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x1000000}) 00:53:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:44 executing program 0 (fault-call:0 fault-nth:22): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:44 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x3}) 00:53:44 executing program 3: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x8000, 0x3, 0x4, 0x8, 0x8b, {0x77359400}, {0x4, 0x2, 0x3, 0xe0, 0x81, 0xff, "a422e4cf"}, 0x4, 0x1, @offset=0x2, 0xfffffffd}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x2000000}) 00:53:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x3000000}) 00:53:44 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x16380) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/nvme-fabrics\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000001200)={0x7, 0x2, 0x8, 0x7, 0x41ec, 0xfff, 0x4}) getsockname$unix(r1, &(0x7f0000001240)=@abs, &(0x7f00000012c0)=0x6e) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001300)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000001340)={0x0, 0x1}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x802, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) r5 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7, 0x40) ioctl$DRM_IOCTL_RM_CTX(r5, 0x6364, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000080)={&(0x7f00000001c0)="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", 0x1000}) [ 919.707278][T24396] FAULT_INJECTION: forcing a failure. [ 919.707278][T24396] name failslab, interval 1, probability 0, space 0, times 0 [ 919.720008][T24396] CPU: 1 PID: 24396 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 919.728892][T24396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.738947][T24396] Call Trace: [ 919.742231][T24396] dump_stack+0x116/0x15d [ 919.746564][T24396] should_fail+0x231/0x240 [ 919.750986][T24396] __should_failslab+0x81/0x90 [ 919.755740][T24396] should_failslab+0x5/0x20 [ 919.760236][T24396] slab_pre_alloc_hook+0x20/0xb0 [ 919.765198][T24396] kmem_cache_alloc+0x4d/0x280 [ 919.769954][T24396] ? xas_create+0x97b/0xba0 [ 919.774451][T24396] xas_create+0x97b/0xba0 [ 919.778772][T24396] xas_store+0x73/0xcb0 [ 919.782914][T24396] ? pcpu_alloc+0xfd8/0x1020 [ 919.787494][T24396] __xa_store+0xcb/0x320 [ 919.791723][T24396] xa_store+0x30/0x50 [ 919.795693][T24396] io_uring_create+0x1c33/0x1ef0 [ 919.800622][T24396] ? io_free_work+0x330/0x330 [ 919.805670][T24396] ? io_sq_wake_function+0xb0/0xb0 [ 919.810781][T24396] __x64_sys_io_uring_setup+0xe1/0x120 [ 919.816256][T24396] do_syscall_64+0x39/0x80 [ 919.820662][T24396] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 919.826543][T24396] RIP: 0033:0x45deb9 [ 919.830426][T24396] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:44 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) syz_io_uring_setup(0x1b91, &(0x7f0000000040)={0x0, 0xc27b, 0x0, 0x1, 0x21c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) userfaultfd(0x80800) syz_io_uring_submit(0x0, r1, &(0x7f0000001140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x1ff, 0x2, &(0x7f0000000140)="07dfee9198608000ea14e79287a85e1df0bdd636097345a084de55f27319c41228c35c0c1f6bce295f44100fe018d80876a13f87dcf0afaf2a76ffc4220b1a0618c18a6b1de442ff71ddc25db76e4cc58328f7f8c00b64806555617ab3377a2ec5fc8251a816606e7b6c5f766f82683c691378d4843262f476e67292ab06faffcc847caad9305a33cdfeae7f9eaa67de4725badaf4ececed931a7a9bb6b4381f4b94c067e282f7eaa7eca1edb2fb6138ed558425a73ffbdebeda932651fa75650d79c1e75b64d0582531b9e54fc0c84674f7e18d3e44abd1d4c1f509b8033bdb4199b4ce808b2ae5986e2a5dc21719817fd6b5f76224e112749bd8d3c275ce3af9d7be5661cdd5b9eb055fc0d0673f959faae95c487763cb27162306110946a1bc9dac30aaa476e41ea151cd25eee1e96a579f436580bbb3db004cf6c4f1f819c7053aede51402ea372cabfe6b6459d12fec1168e819e4008fb2f9e5b6e2d9ec1659a8513b4e8b6954c806d3a86a987952edecb66c3fa889b603da06852e1f4e7577dbf5ddd16356ac6de2ae15f8f0761b2a8dbdc64746d01bacccae813e48b1f0c48e2ea3a8a66e21d8af05acf2cd2a00ef6a7036ff43ab8467a6ee5dc0317a2ead415bd13b1a969762176b30f691e3a5fb21e20170555f39b8cd23cd9ef9e3701181b2fdd8cb14724fb3c38207adc7f80f5917e3abc6010769277560a56dccaf3b3d3d20643519df4c123ef3e7902c493a7d0aade0a3a5b284124f7a2e925e7172bab6da830de14c34448b8071dad6f172d29f51cd11e529a766e4344c140d1223c97e4be254520448ec631d326ead6d868d517439d48a5e1d958ec1fbba61b11d7eaac96819cf157744818e15ffc9aaec90b2c581ef1047aabb7aec6d7cc03daffa0b213b6808cdc712bb1e5e3796f0b4ffb8e68c808dcdab3204b930ff0938a596aba10847b7aedd0a841cce03ccdae8bc4e3a07280cc38353623d2621922783401287966dbe18e4de1571c6fd9b8da782c58e3330917c0af4c3712af55d6822a5fb125ba3225de8386bce357d41092aeb769feac65e2eeceb6977bb26f85bb8763b9ada956eeea856d971c2dd5a213361e47d1b42f4f473726438694c9ea50a21d86e7e38c8d76b69610f437407565200f9fa8554e2a3423dfd8fbc4c1c70a640532a7cb3a953540529fc4dcd93e3c81b2ba22df4c9eddc1cafd9eb6d67852cddee1e49f2c08fbedd66f600915a0c9a7ac6212c3440e5397e568ad4b6bc66571d3a563c650db29877e169ce57e718ddf25f8cdcee43081abdd7ac1778fe9c2aa2e4cce977b8ba78aa9e6913012ef6490d7ec48609d76aa8c3c066f6ba1925833af89dc6707dd5ca56fbcdd6a074801339ad512f2024c2f2eb644491157213699d5f96f18addff5fb80abc62a11188f6df6b43592cbecf2a96baaa17e76e0597598e1f4658e737ddf2975c44e527e8c629ad3add861ad59496b39aa33c0c07628f322097b2da560cdea25bc94df299c6ec2348c4dd7281a48f37000827e518d805fdd1c699c7325606bf043d84452cc9bd23fef17eba127bca66ce691a7dcf21063b90d846d415001b10966a18b7a202378acec1efa544a20d5894885f02ccc651544a2e0e81742ac5ffc765aaa82e39f76f0868228fb5187dac2e7edb690ae25b3e41e12ff38cf57edb091bc4e585297b161ea173d6d550076c992375b34c74f3d7e7dd551f4fae2951d665bf6506b63500798cd6b827914542684a96de237a1f5be8ba38edebd4ae0ac37b270527122183ec177f57893164723abb6bdab61fa180748a11da9cd9aeb388aee3c256c2e5939648521c6b8a4030be7ed70caa29d9b044a89c9fffb4aa0779973fcab38a271e6651282fe44bcf50cd5027b5143ec2ff7fece63b5aba105d6c7e49300f044fa5e79725c8b41dc07d7b2a36dffea30457fe945f6c6368553b29acc33bb131068357d2cc3b4787645379e308bdc2c3dba608078ac610ae041c9c098fb655ccc04cda9e10b1c3b22854bb14811a4e6f8c22ebbb1176e3bb4179f9fb12bf32260efe6b36aa1ccfa8a457c67783491262189a6011620294b2b6fd6c2a7e814ec63b14041c1e3b58cd04b4268d2226bd23f18c3cdf9a88519f72ae11bf32afbb16daac38d7fd4008a9ab5a213b79c42fcaf7ee6c64cf39d033cfcd853ce96123c49e65067d617b83609914a942c8094691ba825906c628e7c1860e065ef25820e3d62be064cc5e92eb18ee988e0a523350e9be0ff12e288e9c558cb26f61afacf4aa0558ababb565f174bb7454ec4fc868926eeb407f5ca5a7b41cc260511ea627503f3585af3500f91cefdf65b8cb9e4063261b09ac2247262abf1dc6d5a284afe6236ae6790c6ba0e50424c3eea78f5aca921273664207ca712c913f59ade30c928b13697624f1ad2110e21379e2e038619ed6b20abf1cebb83bc1de2f254c49ede75b4fb6a6a5a10b4b85cc2c4a489f1b8543129d93661dcccc1ad0355160b492f9f45f6e4fa1ce4ca02dec293c9117541c8d67ca8a368684b576e620ffedabe01590df3aa489d89f69f1fbef36d6179b85435c9cb029adb2707a69a8cebf7b91340f30bfeeb92d04ee599d3d15d3403fbfe51852b73340f5db69c094316455d3d6d58f49b759f20f90471e4918ce4d751e8f6a86488e13a4fc6958164311adfc28b73d5deae7e6d7739a996dfb477fd794e7d124aee9aa0195871e306c55c65eca784438916e1776f710447ceae146ae66105021d4c67cfe52836ef4feabdeffb229383c1a60c847ed56c81f5850e863912073d5d98d46e94abca54f2a13e6bcb871a2ed5247813f311eca9cf1e827eff6eee616c754a9bea7541483811708ebf52453c361458e7287e09beb84c0edd67eb406d5520be348459c3fac5c639f16bf5337839a32dadd4b2df92f326206454026f2e2cf5740d50c936f7c3dfc122c9fa16298f57d2e61d8fe9c9065f2b008ce13a9b9108e2bdc15ae8b4cf92badec7796e3595a61df9b1716e384c3fb5c44403aa5c819eb29bf94cc317f6ddc6db37c9cf1e50aa928274e3f31615cd4cc30562f7d6645ac6df4ddd28cf28edf1eabb7f8b42fb79902999a24917063bd3f846ebba76cc62ec3a3296672f428df8c4b0712bb0686c53b3773a66fbdbc673e4deaf3a994e1c114e4094ea8e6c67fa1279816cfa8d6d3a936c9b07571ed6b760dd7c11dc5347971405cf8f46c20a1cf4b5adc68f381673aaee26a43bc12dce19afe698b96cb2bb7ba04c73a49cf905378eae72a2ac6002cf32a5916218d94c43dec715df6a085eb169f2a5d1e7b7c50eda190dc988770628b5ad8bfbac4dd18976fb13ef5fe124afa7ca934eef01985aafd2d82f95adfdacc0902d8c8de1080ca79de616d8fe1e59411fd37e3726fdc71d41f754a52f18a92b18fbc67568577f2f7d839a20fb75b99a2b8e70021d865003f86ee6b1f72b05c4d7b0fa2c5ce1ede90cf4b6c62f78fdd035ab8c3d5b991155afe045fc6b83d53ea47b08ac37654aadb729803959a6a37a0cbbcb2cf6a6367042850947cc799887fa3bba32e4656350f6a3b7e9281d43ebde8e0e2c6b3ca41861bfaaf334bf06951a174df4e6750365babfe3cb9fd658c31515f4168f0db94c436a5a5f69372a411cce7929ab7f4e5995dbd04b70de977b0d0a9403474517daf8f5eb03d21c41d3569c64f07a26c46db88a6a4ed302f09e06f5b41d1cdc90dbcc375a03b8d84d1db1795b8afddf0035f0303d5043e27206948ae342b7e273f1db162fba06abe30c20a2d6a4578b51d98c60244a192c79626200cfa6468b1179459712e1f3d1934973f484cf2d2e03414e93ffffa4b4ec60ad8c808ce72bb96757429a5cd4192a7f4e7df7cbf31fdd15000c71e4aef78d2201cc71d673029d047cc57a2acbdc2b876d12d19869b9ab996818e9540e9bc775a0c954a834df10e2ec399f218941b6f634e59449f053839fc2e87c0ddf7ee19cfc4969cbedab2584816b18401f534d833a10f1ba8a63dc6876ecb87670b777cf2b9b3ad113bdf8dfb680594d76043b327264297acab82283fcc559329af62211529d6e7f0d6edc623447b280b27df1274232c6e1db368c776475a40cbf3478899156165490256daea8a2ecad5313252797f6a3cc9efbc13b17aa803818c805e5b1f28a8e6956556ad755f89b5041e226fe5dad1d87c0021c9d34f6f416a3895decb2d3966777cde6197e29aded41757c8e3a0a6194e3d3575d6e1b886b2d6a4a52bca51ec9ca3d1f1c54a1910d5822962dd831da2df2320a9816e665a085764715ed14ef1ec9bda4084edae08f04509f269ae5a19a12b82de792ffbeaa7721ec91c122efd301b9237018e4d791b4bd961804e591312858dcae019471e6b2cd5a4ef53de850c0e42efd802474f0193f71fae5de1f36871eef737e69716ab9f009b0808084a76ec0844397c89df1918b4c38a09244e400c49712180352671b41063d365945ef8482dfd1ced50d33d98595581a8fc1d3de8ef37a88ee5d7bea9e22323c09eb01a6c6ba3102be62545a9b5c7216f2f4b52dc41de54194dbae40efe91cb27ac9ea18abce53f738bfcc63c13ad7483dc17567adbe1646ce7d806f481a07717cc24408e5ae6d8d2822245e399afd2950fc9a1b93c98f30aecacd76ca84a6ed8e88654f6b87a1aaf8ea4733ceea3baabc420d220b0c38083e7f956b650e2bb717ccdd438a0f6071ffc3d7d4f6605a898d160fb026b92fe1fd83df2ed6bf5289db68a3ce3cc592183c605e024a3a7d109da7a20c6a4c37e6e42310b78ed03b5f9e12fe576a0b2912afe2c311b034ff44ca70e83b0e937cbfa5a80ce33e8785927c8ff0098545f23a6822a5b4ae7b173ef0e3b9cbfcf9bc9a3555c4bba8b13082eb938fccbe4583d3c65461b72d00865ba6c4a3243ac38f9a454958867bfdf9e095f0639180086597d257599f68222be394460076801043f7f3f7e444fd5290ed9cddf6d3165650f2f41190a586d000ab3e1bbe05440d58edb530ea2a43eb9d77b7ca52ff767b1f87cbff0caf9db8e2540b0658675c08bca8af1f8dc081bb9d1f3123b9db08247a61a62bb10ae7f3383618acb0a0aad77d8bfa6af1321f492cff9846e04ccf331dd182faec01b504979464095ad5d8c4dc887dece5c4595027920fac715fb0629b12c763377156b57b21012825a67551ae18d14a69e4fe41f62234ad82916e7eac5197475cca79468c7b33adb848e6335796ac5ed5730eed70551751a49deaea89e11f357ef42d93a70e92222aaebc31b3fd55311e61c0dd9106e05e2373b87e5b482836eae3c2a4ae8c357a013828a21068ea39629aa5a568752983da834661df28f537c179da457d10bf60bc85d690ef4f50600c2ed7c91c0a963fb284bf75000750099b8586c602807c6ce8271d6bcca4637a4fec98ba6b6d2de51ef435affff5587b834efb58f3dae0b69b67892e7b48ef368b0914ef64b4f86ca5a65f085495ae2ec92add0c728dfc325274065e63bc9c4071a6966bf2162cc948c65d8a6fd562b510b4ae84fad3d40cde8c6be86ad9925cdeac8f826c92fdee6bafb5e5c39ddca91f605558db7348445da95a9e6099e576663389dbc067d3d77be51e884b93f6fa512fad8c0e0e0cb95e0eea22c16e143ffcfdd468f33511807994a9d54453e01842ce96c0126b87c8893207253df0e0351a196b48371b1c2583868e2aec888b9ffe1115bcd45958e34fd78d030c147eb9f36a2b0ac858a43f2d6acb6a64b5a3b227293f6e14b2df395", 0x20}, 0x21) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000001180)={0x0, 0x10}) 00:53:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x3000000}) 00:53:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x4000000}) [ 919.850121][T24396] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 919.858538][T24396] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 919.866501][T24396] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 919.874468][T24396] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 919.882436][T24396] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 919.890502][T24396] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x4c01, 0x0) 00:53:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x5000000}) 00:53:44 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x3e1080) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x10001}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000004) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0x0, r2}) 00:53:44 executing program 0 (fault-call:0 fault-nth:23): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:44 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x40880, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x2, 0x6, 0x2, 0xffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x4000000}) 00:53:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000000)={0xce, 0x5984, 0xbf, 0x3}) 00:53:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x6000000}) 00:53:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/238}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={0x0, 0x400}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 920.202344][T24439] FAULT_INJECTION: forcing a failure. [ 920.202344][T24439] name failslab, interval 1, probability 0, space 0, times 0 [ 920.215018][T24439] CPU: 0 PID: 24439 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 920.223764][T24439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.233812][T24439] Call Trace: [ 920.237105][T24439] dump_stack+0x116/0x15d [ 920.241434][T24439] should_fail+0x231/0x240 [ 920.245980][T24439] __should_failslab+0x81/0x90 [ 920.250739][T24439] should_failslab+0x5/0x20 [ 920.255251][T24439] slab_pre_alloc_hook+0x20/0xb0 [ 920.260195][T24439] kmem_cache_alloc+0x4d/0x280 [ 920.265028][T24439] ? xas_create+0x97b/0xba0 [ 920.269531][T24439] xas_create+0x97b/0xba0 [ 920.282483][T24439] xas_store+0x73/0xcb0 [ 920.286643][T24439] ? pcpu_alloc+0xfd8/0x1020 [ 920.291360][T24439] __xa_store+0xcb/0x320 [ 920.295605][T24439] xa_store+0x30/0x50 [ 920.299583][T24439] io_uring_create+0x1c33/0x1ef0 [ 920.304565][T24439] ? io_free_work+0x330/0x330 [ 920.309235][T24439] ? io_sq_wake_function+0xb0/0xb0 [ 920.314358][T24439] __x64_sys_io_uring_setup+0xe1/0x120 [ 920.320251][T24439] do_syscall_64+0x39/0x80 [ 920.324664][T24439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 920.330550][T24439] RIP: 0033:0x45deb9 00:53:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x5000000}) 00:53:44 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x7000000}) [ 920.334437][T24439] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.354089][T24439] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 920.362493][T24439] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 920.370462][T24439] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 920.378433][T24439] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 920.386398][T24439] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 920.394393][T24439] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x408000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008044}, 0x4008010) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x6000000}) 00:53:44 executing program 0 (fault-call:0 fault-nth:24): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x8000000}) 00:53:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-control\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:44 executing program 5: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x2}, 0x4) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x810, 0xffffffffffffffff, 0x6d000) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x5fa8681d, 0x81) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000003600)=""/102400, 0x19000}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000140)=""/84, 0x54}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f00000025c0)=""/4115, 0x1013}], 0x7, &(0x7f0000000540)=""/151, 0x97}, 0x40000040) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:44 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x40000, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x23) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x800) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{0x4, 0x48, 0x5, 0x6373}, {0x52, 0x0, 0x1}, {0x1f, 0x1, 0x80, 0x3}, {0x5, 0x8, 0x2, 0x9}, {0x80, 0xe3, 0xf8, 0x1}, {0x2, 0x6, 0x8, 0xffff}, {0x4, 0x5a, 0xfb, 0x81}]}, 0x10) 00:53:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x7000000}) 00:53:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x9000000}) 00:53:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x40, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x8000000}) [ 920.624174][T24478] FAULT_INJECTION: forcing a failure. [ 920.624174][T24478] name failslab, interval 1, probability 0, space 0, times 0 [ 920.636834][T24478] CPU: 0 PID: 24478 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 920.645588][T24478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.655632][T24478] Call Trace: [ 920.658916][T24478] dump_stack+0x116/0x15d [ 920.663243][T24478] should_fail+0x231/0x240 [ 920.667653][T24478] __should_failslab+0x81/0x90 00:53:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x9000000}) [ 920.672506][T24478] should_failslab+0x5/0x20 [ 920.677005][T24478] slab_pre_alloc_hook+0x20/0xb0 [ 920.681936][T24478] kmem_cache_alloc+0x4d/0x280 [ 920.686701][T24478] ? xas_create+0x97b/0xba0 [ 920.691198][T24478] xas_create+0x97b/0xba0 [ 920.695527][T24478] xas_store+0x73/0xcb0 [ 920.699716][T24478] ? pcpu_alloc+0xfd8/0x1020 [ 920.704304][T24478] __xa_store+0xcb/0x320 [ 920.708550][T24478] xa_store+0x30/0x50 [ 920.712519][T24478] io_uring_create+0x1c33/0x1ef0 [ 920.717454][T24478] ? io_free_work+0x330/0x330 00:53:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c2a147c6b9800000c00f3235002000000f30b98a000000b800200000ba000000000f30440f20c03504000000440f22c00fc7af0000000066b87a008ec0c4c2c991bccb02deb622660f38819675daf48b0fc739b9bc030000b823000000ba000000000f30", 0x65}], 0x1, 0x46, &(0x7f0000000140)=[@cstype3={0x5, 0x2}], 0x1) [ 920.722185][T24478] ? io_sq_wake_function+0xb0/0xb0 [ 920.727296][T24478] __x64_sys_io_uring_setup+0xe1/0x120 [ 920.732816][T24478] do_syscall_64+0x39/0x80 [ 920.737230][T24478] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 920.743110][T24478] RIP: 0033:0x45deb9 [ 920.747006][T24478] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.766608][T24478] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 920.775013][T24478] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 920.782980][T24478] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 920.790951][T24478] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 920.798918][T24478] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 920.806912][T24478] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:45 executing program 0 (fault-call:0 fault-nth:25): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xa000000}) 00:53:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x12840, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil}) socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:45 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0xa00, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000140)=0x3) write$6lowpan_enable(r0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="5273207d511f46d0c965cdaabf6b987cd31487363b889910faf6226426139ed8070a858c7b7a655b00faf6fca25cc74c68f14f9c74822972cfe77e32eb607128cf24d479d95c840535cf0512727d067a5028611c3298849d56f75ef0d102edefba6ad8535df7f679ce715e968a3d3320388c770cc633506f1ef719d9046d43b6f2098a7ba66c88a89b3ecfb9a6776da359884e8ce716e65c49e45a7c69b86bd670ef0ba87ad306f73eebe603703a49e27a687e38882f1f6ca6ce6108e156d2bf", 0xc0, 0x200480c5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0x4c01, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x0) 00:53:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xa000000}) 00:53:45 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x3213e2) 00:53:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xb000000}) 00:53:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xb000000}) 00:53:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8000, 0x30083) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x2, 0x7, 0x3, 0x4, 0x12, 0x8}) 00:53:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvme-fabrics\x00', 0x80000, 0x0) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000340)=""/57, &(0x7f0000000380)=0x39) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 920.993108][T24517] FAULT_INJECTION: forcing a failure. [ 920.993108][T24517] name failslab, interval 1, probability 0, space 0, times 0 [ 921.005817][T24517] CPU: 0 PID: 24517 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 921.014570][T24517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.024720][T24517] Call Trace: [ 921.028008][T24517] dump_stack+0x116/0x15d [ 921.032473][T24517] should_fail+0x231/0x240 [ 921.036968][T24517] __should_failslab+0x81/0x90 [ 921.041756][T24517] should_failslab+0x5/0x20 [ 921.046258][T24517] slab_pre_alloc_hook+0x20/0xb0 [ 921.051185][T24517] kmem_cache_alloc+0x4d/0x280 [ 921.055948][T24517] ? xas_create+0x97b/0xba0 [ 921.060478][T24517] xas_create+0x97b/0xba0 [ 921.064807][T24517] xas_store+0x73/0xcb0 [ 921.068962][T24517] ? pcpu_alloc+0xfd8/0x1020 [ 921.073549][T24517] __xa_store+0xcb/0x320 [ 921.077790][T24517] xa_store+0x30/0x50 [ 921.081769][T24517] io_uring_create+0x1c33/0x1ef0 [ 921.086729][T24517] ? io_free_work+0x330/0x330 [ 921.091399][T24517] ? io_sq_wake_function+0xb0/0xb0 [ 921.097019][T24517] __x64_sys_io_uring_setup+0xe1/0x120 [ 921.102480][T24517] do_syscall_64+0x39/0x80 [ 921.106889][T24517] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 921.112784][T24517] RIP: 0033:0x45deb9 [ 921.116687][T24517] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x7aee9f6867757dbd) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xc000000}) [ 921.136458][T24517] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 921.144866][T24517] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 921.152856][T24517] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 921.161183][T24517] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 921.169190][T24517] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 921.177200][T24517] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:45 executing program 0 (fault-call:0 fault-nth:26): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000), &(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x7, 0xa}) 00:53:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xc000000}) 00:53:45 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40500, 0x0) read$qrtrtun(r0, &(0x7f0000000100)=""/211, 0xd3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x20001, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80, 0x0) sendto$isdn(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000080010001002f2fe6cdc7a78eae9ecbfd398193617d741e5470b9cf8fbf702aaae04ee28a1fe95bb3a0e17f062e95b2e207e0fedddb9c4abc09bee44e92fa96557d528f3d8cb6fb26b38a09ead8c64d4199ae6730"], 0x57, 0x0, &(0x7f00000002c0)={0x22, 0x3, 0xab, 0x1, 0x17}, 0x6) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x4c01, 0x0) 00:53:45 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x214003, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x7, 0x1, 0x7, 0x80000001}, {0x0, 0x4, 0x8, 0x8001}, {0x3, 0x1, 0x81, 0x6}, {0xff7f, 0x6, 0x20, 0x3}, {0x6, 0x5, 0x7, 0x7}, {0x20, 0x20, 0x7a, 0xac}]}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xf36a, 0x3e7881) sendto$isdn(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000069640000b3fe8ee0d105f4a0ed3bf8050cdaf4204b131ffcee927fa98b33a1e07c5b55f962b66bbdafff7c3dd763bbb0d5770fff08fdcf68d6f5e11b481932dd810ab8db95f5c08811f61b6f975e22a257cf082a77ec45cf587cbca8d7eb215e3c3bb67560a16a85193cc3c5d7d068223360587d4f3572d30e42b36fef1fdf6ef67509fb15165b86e2f0939d55b2c54267b6fdbe711895a8b05d468c0963a7b5bc96a7fbbdb83cf132c1efab4339e66767b2c5fc5d1369105a195f77cd17426686bc264d9cf3be17168e766c3eb1c07c9e49466e253f1ba3cd9a7d6561fed6eea6208b886eba4f01c6a143f5394f0a8f086f16"], 0x64, 0x41, &(0x7f0000000100)={0x22, 0x0, 0xff, 0x6, 0x11}, 0x6) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x43, 0x400000) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_RM_CTX(r2, 0x6364, 0x0) 00:53:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xd000000}) 00:53:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 921.423302][T24553] dlm: non-version read from control device 211 [ 921.453336][T24552] FAULT_INJECTION: forcing a failure. [ 921.453336][T24552] name failslab, interval 1, probability 0, space 0, times 0 [ 921.466005][T24552] CPU: 1 PID: 24552 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 921.475351][T24552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.486436][T24552] Call Trace: [ 921.489747][T24552] dump_stack+0x116/0x15d [ 921.494175][T24552] should_fail+0x231/0x240 [ 921.498707][T24552] __should_failslab+0x81/0x90 [ 921.503475][T24552] should_failslab+0x5/0x20 [ 921.508000][T24552] slab_pre_alloc_hook+0x20/0xb0 [ 921.512972][T24552] kmem_cache_alloc+0x4d/0x280 [ 921.517735][T24552] ? xas_create+0x97b/0xba0 [ 921.522234][T24552] xas_create+0x97b/0xba0 [ 921.526562][T24552] xas_store+0x73/0xcb0 [ 921.530737][T24552] ? pcpu_alloc+0xfd8/0x1020 [ 921.535315][T24552] __xa_store+0xcb/0x320 [ 921.539551][T24552] xa_store+0x30/0x50 [ 921.543527][T24552] io_uring_create+0x1c33/0x1ef0 [ 921.548460][T24552] ? io_free_work+0x330/0x330 [ 921.553135][T24552] ? io_sq_wake_function+0xb0/0xb0 [ 921.558243][T24552] __x64_sys_io_uring_setup+0xe1/0x120 [ 921.563703][T24552] do_syscall_64+0x39/0x80 [ 921.568115][T24552] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 921.573997][T24552] RIP: 0033:0x45deb9 [ 921.577922][T24552] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 921.597529][T24552] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 921.605940][T24552] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 921.613908][T24552] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab 00:53:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xe000000}) 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xd000000}) 00:53:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 921.621899][T24552] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 921.629870][T24552] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 921.637837][T24552] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 [ 921.651255][T24553] dlm: non-version read from control device 211 00:53:46 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x57, 0x9, 0x0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x0, 0xfafd, 0xba}}) recvfrom$packet(r1, &(0x7f0000000080)=""/97, 0x61, 0x12000, &(0x7f00000001c0)={0x11, 0x7, r2, 0x1, 0x9, 0x6, @remote}, 0x14) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:46 executing program 0 (fault-call:0 fault-nth:27): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0xe000000}) 00:53:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x10000000}) 00:53:46 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x428100, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) [ 921.819633][T24580] FAULT_INJECTION: forcing a failure. [ 921.819633][T24580] name failslab, interval 1, probability 0, space 0, times 0 [ 921.832398][T24580] CPU: 0 PID: 24580 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 921.841151][T24580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.851201][T24580] Call Trace: [ 921.854493][T24580] dump_stack+0x116/0x15d [ 921.858812][T24580] should_fail+0x231/0x240 [ 921.863414][T24580] __should_failslab+0x81/0x90 [ 921.868192][T24580] should_failslab+0x5/0x20 [ 921.872689][T24580] slab_pre_alloc_hook+0x20/0xb0 [ 921.877627][T24580] kmem_cache_alloc+0x4d/0x280 [ 921.882436][T24580] ? xas_create+0x97b/0xba0 [ 921.886932][T24580] xas_create+0x97b/0xba0 [ 921.891286][T24580] xas_store+0x73/0xcb0 [ 921.895449][T24580] ? pcpu_alloc+0xfd8/0x1020 [ 921.900151][T24580] __xa_store+0xcb/0x320 [ 921.904389][T24580] xa_store+0x30/0x50 [ 921.908407][T24580] io_uring_create+0x1c33/0x1ef0 [ 921.913341][T24580] ? io_free_work+0x330/0x330 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x10000000}) 00:53:46 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) [ 921.918013][T24580] ? io_sq_wake_function+0xb0/0xb0 [ 921.923158][T24580] __x64_sys_io_uring_setup+0xe1/0x120 [ 921.928623][T24580] do_syscall_64+0x39/0x80 [ 921.933175][T24580] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 921.939084][T24580] RIP: 0033:0x45deb9 [ 921.942979][T24580] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x402, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, 0x0}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x58081, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000080)={0x2, r1}) 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x11000000}) 00:53:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dd91a79f023033c9060620"], 0x2c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfe}, 0xfffffffffffffe17}, 0x1, 0x0, 0x0, 0x40104}, 0x20040804) [ 921.962752][T24580] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 921.971160][T24580] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 921.979136][T24580] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 921.987107][T24580] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 921.995072][T24580] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 922.003222][T24580] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x11000000}) 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x12000000}) 00:53:46 executing program 0 (fault-call:0 fault-nth:28): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:46 executing program 3: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x5, 0xa, 0x4, 0x8, 0x4, {0x77359400}, {0x5, 0x8, 0xfd, 0x81, 0x20, 0xfe, "d0e87611"}, 0xfff, 0x1, @fd, 0x10001, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x4, 0x2, 0x4, 0x70000, 0x6, {0x77359400}, {0x1, 0xc, 0xfe, 0x6, 0x80, 0x6, "f8353f08"}, 0x5, 0x2, @userptr=0x1, 0xff, 0x0, r0}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8, 0x80002) ioctl$DRM_IOCTL_RM_CTX(r1, 0x4c01, 0x0) 00:53:46 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x101600, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x14) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0]}) 00:53:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x12000000}) 00:53:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x311002, 0x0) 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x20000140}) [ 922.260029][T24622] FAULT_INJECTION: forcing a failure. [ 922.260029][T24622] name failslab, interval 1, probability 0, space 0, times 0 [ 922.272725][T24622] CPU: 1 PID: 24622 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 922.281475][T24622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.291571][T24622] Call Trace: [ 922.294871][T24622] dump_stack+0x116/0x15d [ 922.299201][T24622] should_fail+0x231/0x240 [ 922.303649][T24622] __should_failslab+0x81/0x90 [ 922.308429][T24622] should_failslab+0x5/0x20 [ 922.312923][T24622] slab_pre_alloc_hook+0x20/0xb0 [ 922.318266][T24622] kmem_cache_alloc+0x4d/0x280 [ 922.323056][T24622] ? xas_create+0x97b/0xba0 [ 922.327549][T24622] xas_create+0x97b/0xba0 [ 922.332582][T24622] xas_store+0x73/0xcb0 [ 922.336754][T24622] ? pcpu_alloc+0xfd8/0x1020 [ 922.342043][T24622] __xa_store+0xcb/0x320 [ 922.346847][T24622] xa_store+0x30/0x50 [ 922.351520][T24622] io_uring_create+0x1c33/0x1ef0 [ 922.357203][T24622] ? io_free_work+0x330/0x330 [ 922.361878][T24622] ? io_sq_wake_function+0xb0/0xb0 [ 922.367005][T24622] __x64_sys_io_uring_setup+0xe1/0x120 [ 922.372466][T24622] do_syscall_64+0x39/0x80 [ 922.376879][T24622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 922.382933][T24622] RIP: 0033:0x45deb9 [ 922.387356][T24622] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x25000000}) 00:53:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101100, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x5}) 00:53:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0xd6bc0a03b41936ad, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000c3c8e7c581ac4a150e843841c1216cc8ab3a9f0000e120e97b5ca27a16e002a358b8e577f5f65a93ae24e7b39474037fc7e4b18fa9f1af3b03034671110463b69a9f69abbbb7465c5284c60cc1b24a6ef3d27ac351ea2bb52475720922a8222b2233d4a9f14e2fac997b06cfce85ec578ece193e00f58bc22d780c116f7184df5a7fb4348f16edc76d469c0bd59d580967267e87a8b453163c3570f341fb46144346cda19e8dd553854456169d3bf2cd5d7ae1ffeb2b000000000000f63b28ecaa19418ca958e671f78053596407569db1a87c22fe2ef732298e5a523d9b5e78b4fe2d88b64f06b4567fa1d4be2698c9bd6e5d6767824e62f0e725f4a16c72ef4c7efe0b29646d5dbd4fe790c8dc236e426029eedb305ad11ad4114f1801000000054c", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf2506000000060003000800000006001d00ff07000005001400d000000005000d0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000054) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x4800) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000040)={0x1, 0x9, 0x8, 0xda, 0x8, 0x2}) 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x40010020}) 00:53:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xd39, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x5c000000}) [ 922.407061][T24622] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 922.415913][T24622] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 922.423877][T24622] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 922.431845][T24622] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 922.439972][T24622] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 922.447943][T24622] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:46 executing program 0 (fault-call:0 fault-nth:29): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x20000140}) 00:53:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfff, 0x40000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x3, 0xcccccccc}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x400001) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x4}) 00:53:46 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000040)=""/2, 0x2, 0x12001, &(0x7f0000000080)={0x11, 0x19, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0xa0100) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={r1}) [ 922.575611][T24655] FAULT_INJECTION: forcing a failure. [ 922.575611][T24655] name failslab, interval 1, probability 0, space 0, times 0 [ 922.588843][T24655] CPU: 1 PID: 24655 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 922.598401][T24655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.608453][T24655] Call Trace: [ 922.611737][T24655] dump_stack+0x116/0x15d [ 922.616058][T24655] should_fail+0x231/0x240 [ 922.621987][T24655] __should_failslab+0x81/0x90 [ 922.626752][T24655] should_failslab+0x5/0x20 [ 922.631250][T24655] slab_pre_alloc_hook+0x20/0xb0 [ 922.636188][T24655] kmem_cache_alloc+0x4d/0x280 [ 922.640948][T24655] ? xas_create+0x97b/0xba0 [ 922.645451][T24655] xas_create+0x97b/0xba0 [ 922.649999][T24655] xas_store+0x73/0xcb0 [ 922.654883][T24655] ? pcpu_alloc+0xfd8/0x1020 [ 922.660533][T24655] __xa_store+0xcb/0x320 [ 922.665306][T24655] xa_store+0x30/0x50 [ 922.669316][T24655] io_uring_create+0x1c33/0x1ef0 [ 922.674328][T24655] ? io_free_work+0x330/0x330 [ 922.679966][T24655] ? io_sq_wake_function+0xb0/0xb0 [ 922.686342][T24655] __x64_sys_io_uring_setup+0xe1/0x120 [ 922.692848][T24655] do_syscall_64+0x39/0x80 [ 922.697275][T24655] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 922.703165][T24655] RIP: 0033:0x45deb9 [ 922.707632][T24655] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 922.727501][T24655] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 922.735911][T24655] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 922.744788][T24655] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 922.753478][T24655] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 922.761468][T24655] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 00:53:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000000)) 00:53:47 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000480)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x2, 0x4, 0x0, 0x8001}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x400448c9, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)) r3 = syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0x0, 0x2d2f83) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)={0x1, 0xc, 0x4, 0x10, 0x1000, {}, {0x5, 0x0, 0x7, 0x20, 0x9, 0x6, "5a19b6ae"}, 0x9, 0x2, @userptr=0x1, 0x7ff, 0x0, r5}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfffffffffffffef4) recvfrom$packet(r6, &(0x7f0000000200)=""/166, 0xa6, 0x2, &(0x7f00000003c0)={0x11, 0x1, r7, 0x1, 0x7, 0x6, @broadcast}, 0x14) epoll_create(0x3) 00:53:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0xfffffffffffff000}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:47 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x100000, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x105480, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r5, 0x0, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x40002) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000140)=""/24, 0x18, 0x2100, &(0x7f0000000240)={0x11, 0x5, 0x0, 0x1, 0x85, 0x6, @remote}, 0x14) ioctl$DRM_IOCTL_RM_CTX(r4, 0x4c01, 0x0) [ 922.769948][T24655] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:47 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x10001}) 00:53:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:47 executing program 0 (fault-call:0 fault-nth:30): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x25000000}) 00:53:47 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x3}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x7}) 00:53:47 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101001, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0xdc91) 00:53:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c74424000171c448c74424029e7e0980c7442406000000000f01142448b852de0000000000000f23d00f21f835100000050f23f80f7f0c85b96b000046dbe266baf80cb87ee04785ef66bafc0cec66f3f2654475e8c421fbe6255f68b89af3f30f23d8430f01dfc744240067000000c74424021479ffffff2c24", 0x7a}], 0x1, 0x32, &(0x7f0000000240)=[@dstype3={0x7, 0xe}, @cstype0={0x4, 0xd}], 0x2) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000002c0)=0x3) 00:53:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x460042) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 923.018575][T24701] FAULT_INJECTION: forcing a failure. [ 923.018575][T24701] name failslab, interval 1, probability 0, space 0, times 0 [ 923.032168][T24701] CPU: 0 PID: 24701 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 923.040960][T24701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.050999][T24701] Call Trace: [ 923.054271][T24701] dump_stack+0x116/0x15d [ 923.058580][T24701] should_fail+0x231/0x240 [ 923.062974][T24701] __should_failslab+0x81/0x90 [ 923.067742][T24701] should_failslab+0x5/0x20 [ 923.072248][T24701] slab_pre_alloc_hook+0x20/0xb0 [ 923.077209][T24701] kmem_cache_alloc+0x4d/0x280 [ 923.081952][T24701] ? xas_create+0x97b/0xba0 [ 923.086432][T24701] xas_create+0x97b/0xba0 [ 923.090741][T24701] xas_store+0x73/0xcb0 [ 923.094875][T24701] ? pcpu_alloc+0xfd8/0x1020 [ 923.099461][T24701] __xa_store+0xcb/0x320 [ 923.103752][T24701] xa_store+0x30/0x50 [ 923.107709][T24701] io_uring_create+0x1c33/0x1ef0 [ 923.112621][T24701] ? io_free_work+0x330/0x330 [ 923.117273][T24701] ? io_sq_wake_function+0xb0/0xb0 [ 923.122362][T24701] __x64_sys_io_uring_setup+0xe1/0x120 [ 923.127802][T24701] do_syscall_64+0x39/0x80 [ 923.132237][T24701] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 923.138172][T24701] RIP: 0033:0x45deb9 [ 923.142050][T24701] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x40010020}) 00:53:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x10, 0xffffffffffffffff, 0x8000000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x801, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) 00:53:47 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x40}) [ 923.161630][T24701] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 923.170019][T24701] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 923.177985][T24701] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 923.185935][T24701] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 923.193899][T24701] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 923.201874][T24701] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x10001) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0xfffffffffffffe23) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="069db1205b0cd66fe0720adb89810b032b428acd6a4fab870d7218b69706be42695a9ab3539f411b6b58a5e7e522fec13ad7210eb3392668a656992c8a5fd880afcb7941e6e634de057f49e3f30ad168947a74cf622d759a1abf874040a18d81551bd477ef2084148bc599e889547a12722991d280100aa7ce4dedbcaab535477a702c5f313ebc1009ba419389bf0a95701e20210c77acea5b5c3cdc51a32c7c32ddde4ec21fcec1825763c5fd2e202f92ca3f97305d0d2df9a1208daf6144685d396dbea8b318752a83fbfd34e123e880183474d58701daf89f8d33e36b0af53a1778647cf75634", 0xe8}) 00:53:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x5c000000}) 00:53:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x92800) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) socketpair(0x5, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x4800, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES64=r3], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x406, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)) 00:53:47 executing program 0 (fault-call:0 fault-nth:31): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x80000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:47 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x4, 0x0, 0x7}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0xfc, &(0x7f0000000280)=""/252, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x2}) 00:53:47 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x1}) 00:53:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001700)=0x14) accept4$packet(r1, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001780)=0x14, 0x81000) 00:53:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x7, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x52, r1}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000100)) write$6lowpan_enable(r3, 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r5, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x9}) 00:53:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0x3f, 0x1, 0x80000001, 0xeeeeeeee}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x7}) 00:53:47 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r0}) 00:53:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x8, 0x6b25c1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x1}) [ 923.552019][T24747] FAULT_INJECTION: forcing a failure. [ 923.552019][T24747] name failslab, interval 1, probability 0, space 0, times 0 [ 923.564739][T24747] CPU: 0 PID: 24747 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 923.573493][T24747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.583622][T24747] Call Trace: [ 923.587057][T24747] dump_stack+0x116/0x15d [ 923.591436][T24747] should_fail+0x231/0x240 [ 923.595854][T24747] __should_failslab+0x81/0x90 [ 923.600695][T24747] should_failslab+0x5/0x20 [ 923.605184][T24747] slab_pre_alloc_hook+0x20/0xb0 [ 923.610102][T24747] kmem_cache_alloc+0x4d/0x280 [ 923.614901][T24747] ? xas_create+0x97b/0xba0 [ 923.619399][T24747] xas_create+0x97b/0xba0 [ 923.623788][T24747] xas_store+0x73/0xcb0 [ 923.627927][T24747] ? pcpu_alloc+0xfd8/0x1020 [ 923.632497][T24747] __xa_store+0xcb/0x320 [ 923.636720][T24747] xa_store+0x30/0x50 [ 923.645541][T24747] io_uring_create+0x1c33/0x1ef0 [ 923.650454][T24747] ? io_free_work+0x330/0x330 [ 923.655107][T24747] ? io_sq_wake_function+0xb0/0xb0 [ 923.660203][T24747] __x64_sys_io_uring_setup+0xe1/0x120 [ 923.665641][T24747] do_syscall_64+0x39/0x80 [ 923.670035][T24747] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 923.675901][T24747] RIP: 0033:0x45deb9 [ 923.679885][T24747] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:53:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x7, 0x2, 0x6, 0x9c, 0x2, 0x100000001}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080)={r1, 0x1}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 923.699467][T24747] RSP: 002b:00007f0d0315cbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 923.707892][T24747] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045deb9 [ 923.715855][T24747] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000039ab [ 923.723810][T24747] RBP: 00007f0d0315cca0 R08: 0000000020000180 R09: 0000000020000180 [ 923.731782][T24747] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ffc000 [ 923.739743][T24747] R13: 0000000020ffb000 R14: 0000000020000180 R15: 0000000020000040 00:53:48 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x80000000, 0x80000) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x5e9041, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x541b, 0x0) 00:53:48 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20829a528af68ccf, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x402680, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x2, 0x6139, 0xfffffff8, 0x0, r1}) 00:53:48 executing program 0 (fault-call:0 fault-nth:32): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0xec2c, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0xfffffffffffffe13}) 00:53:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x0, r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:48 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0xfffffffa) 00:53:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x348f, 0x8a840) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x4a80) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:48 executing program 2: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@buf={0x59, &(0x7f0000000180)="2b08085a0ab4bf1306c51e45020bca9ef152f756b2735965724395c2d1ec2d733ceb5bdc657f80b81e0fdf988fa45fdc952712624cf78e88d55821b87a8339e80764bfcc6830bdd9ec37246f24650478779fc005f02987705e"}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x608802, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r0, 0x8) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) io_uring_setup(0x4f7b, &(0x7f0000000000)={0x0, 0xb574, 0x0, 0x0, 0x1fd, 0x0, r2}) accept4$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r3, 0x4, 0x5, 0x1, 0x5, 0x7, @mcast1, @local, 0x8000, 0x1, 0x9, 0xfffffffd}}) 00:53:48 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000040)=0x401) 00:53:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) getegid() [ 924.009137][T24788] FAULT_INJECTION: forcing a failure. [ 924.009137][T24788] name failslab, interval 1, probability 0, space 0, times 0 [ 924.029812][T24788] CPU: 0 PID: 24788 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 924.038698][T24788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.048760][T24788] Call Trace: [ 924.052045][T24788] dump_stack+0x116/0x15d 00:53:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) [ 924.056373][T24788] should_fail+0x231/0x240 [ 924.060794][T24788] __should_failslab+0x81/0x90 [ 924.065562][T24788] should_failslab+0x5/0x20 [ 924.070065][T24788] slab_pre_alloc_hook+0x20/0xb0 [ 924.074997][T24788] kmem_cache_alloc+0x4d/0x280 [ 924.079757][T24788] ? vm_area_dup+0x44/0x120 [ 924.084258][T24788] ? should_fail+0xd6/0x240 [ 924.088811][T24788] vm_area_dup+0x44/0x120 [ 924.093139][T24788] ? slab_pre_alloc_hook+0x20/0xb0 [ 924.098268][T24788] ? xas_create+0x97b/0xba0 [ 924.102763][T24788] ? xas_create+0xb4e/0xba0 00:53:48 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000000)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x800, 0x0) [ 924.107261][T24788] __split_vma+0x82/0x320 [ 924.111602][T24788] ? vmacache_find+0x2df/0x320 [ 924.116364][T24788] __do_munmap+0x28e/0x1310 [ 924.120865][T24788] mmap_region+0x5ab/0x13f0 [ 924.125383][T24788] ? bpf_lsm_mmap_addr+0x5/0x10 [ 924.130239][T24788] do_mmap+0x77d/0xc90 [ 924.134317][T24788] vm_mmap_pgoff+0xe5/0x170 [ 924.138822][T24788] ksys_mmap_pgoff+0x2a8/0x380 [ 924.143587][T24788] do_syscall_64+0x39/0x80 [ 924.148001][T24788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 924.153881][T24788] RIP: 0033:0x45df0a [ 924.157777][T24788] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 924.177482][T24788] RSP: 002b:00007f0d0315cbc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 924.186001][T24788] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045df0a [ 924.194300][T24788] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffb000 [ 924.202333][T24788] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000000 [ 924.210301][T24788] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020ffb000 [ 924.218267][T24788] R13: 0000000000090140 R14: 0000000000008011 R15: 0000000000000000 00:53:48 executing program 0 (fault-call:0 fault-nth:33): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:48 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:48 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x51b080) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0xffffffffffffffe0}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x400000, 0x0) 00:53:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000040)={0x0, 0x5}) 00:53:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x6}) [ 924.336321][T24824] FAULT_INJECTION: forcing a failure. [ 924.336321][T24824] name failslab, interval 1, probability 0, space 0, times 0 [ 924.363426][T24824] CPU: 0 PID: 24824 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 924.372202][T24824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.382287][T24824] Call Trace: 00:53:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil}) [ 924.385580][T24824] dump_stack+0x116/0x15d [ 924.389974][T24824] should_fail+0x231/0x240 [ 924.394498][T24824] __should_failslab+0x81/0x90 [ 924.399262][T24824] should_failslab+0x5/0x20 [ 924.403762][T24824] slab_pre_alloc_hook+0x20/0xb0 [ 924.408702][T24824] kmem_cache_alloc+0x4d/0x280 [ 924.413465][T24824] ? anon_vma_clone+0x8d/0x370 [ 924.418220][T24824] anon_vma_clone+0x8d/0x370 [ 924.422801][T24824] __split_vma+0x129/0x320 [ 924.427211][T24824] ? vmacache_find+0x2df/0x320 [ 924.431992][T24824] __do_munmap+0x28e/0x1310 [ 924.436498][T24824] mmap_region+0x5ab/0x13f0 [ 924.440999][T24824] ? bpf_lsm_mmap_addr+0x5/0x10 [ 924.445852][T24824] do_mmap+0x77d/0xc90 [ 924.450883][T24824] vm_mmap_pgoff+0xe5/0x170 [ 924.455393][T24824] ksys_mmap_pgoff+0x2a8/0x380 [ 924.460213][T24824] do_syscall_64+0x39/0x80 [ 924.464626][T24824] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 924.471155][T24824] RIP: 0033:0x45df0a 00:53:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x26404866, 0x1f}) [ 924.475720][T24824] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 924.496047][T24824] RSP: 002b:00007f0d0315cbc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 924.504453][T24824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045df0a [ 924.512419][T24824] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffb000 [ 924.520389][T24824] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000000 [ 924.528355][T24824] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020ffb000 00:53:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:48 executing program 1: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7ffffe, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0xe7287e57bac04273, @pix={0x10000, 0x1, 0x59452b45, 0x8, 0x0, 0x7, 0x1, 0x10000, 0x0, 0x7, 0x2, 0x6}}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) [ 924.536369][T24824] R13: 0000000000090140 R14: 0000000000008011 R15: 0000000000000000 00:53:48 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) time(&(0x7f0000000140)) write$6lowpan_enable(r1, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) 00:53:48 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x230800, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000006, 0x50, r2, 0x39971000) 00:53:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x428042, 0x0) 00:53:49 executing program 0 (fault-call:0 fault-nth:34): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:49 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x48000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x6, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000080)={0x0, r2}) 00:53:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x70, 0x0, &(0x7f00000002c0)=[@register_looper, @increfs={0x40046304, 0x1}, @acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x1, 0x40}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/154, 0x9a, 0x0, 0x6}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @enter_looper, @decrefs={0x40046307, 0x2}, @register_looper], 0xe, 0x0, &(0x7f0000000100)="4a1615e468f95dafd9eac80acd3b"}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:49 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'a', ' *:* ', 'wm\x00'}, 0x9) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x400448c9, &(0x7f0000000140)) 00:53:49 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x1, 0xa1, 0xea000000, 0xb0b0b0b0}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) 00:53:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x3, 0x9}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)={r2, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x41804}, 0x20000002) write$6lowpan_enable(r7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0x2002}) 00:53:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x4641) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x100}) [ 924.783200][T24873] FAULT_INJECTION: forcing a failure. [ 924.783200][T24873] name failslab, interval 1, probability 0, space 0, times 0 [ 924.807811][T24873] CPU: 0 PID: 24873 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 924.816588][T24873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.826640][T24873] Call Trace: 00:53:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x19}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4840}, 0x20008000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x4}, 0x4) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 924.829936][T24873] dump_stack+0x116/0x15d [ 924.834263][T24873] should_fail+0x231/0x240 [ 924.838685][T24873] __should_failslab+0x81/0x90 [ 924.844328][T24873] should_failslab+0x5/0x20 [ 924.848828][T24873] slab_pre_alloc_hook+0x20/0xb0 [ 924.853766][T24873] kmem_cache_alloc+0x4d/0x280 [ 924.858530][T24873] ? vm_area_alloc+0x28/0xa0 [ 924.864277][T24873] vm_area_alloc+0x28/0xa0 [ 924.868786][T24873] mmap_region+0x74a/0x13f0 [ 924.874272][T24873] ? bpf_lsm_mmap_addr+0x5/0x10 [ 924.879133][T24873] do_mmap+0x77d/0xc90 00:53:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x424800) [ 924.884188][T24873] vm_mmap_pgoff+0xe5/0x170 [ 924.888862][T24873] ksys_mmap_pgoff+0x2a8/0x380 [ 924.893621][T24873] do_syscall_64+0x39/0x80 [ 924.899178][T24873] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 924.905120][T24873] RIP: 0033:0x45df0a [ 924.909052][T24873] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 924.929028][T24873] RSP: 002b:00007f0d0315cbc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 924.937439][T24873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045df0a [ 924.945438][T24873] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffb000 [ 924.954853][T24873] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000000 [ 924.962823][T24873] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020ffb000 [ 924.971854][T24873] R13: 0000000000090140 R14: 0000000000008011 R15: 0000000000000000 00:53:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x500, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) socketpair(0x6, 0x4, 0x9, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x7, 0x0) accept4(r1, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x800) 00:53:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x9, 0x5, 0x8001, 0x5e5e5e5e}) 00:53:49 executing program 3: restart_syscall() r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x509040) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DRM_IOCTL_RM_CTX(r1, 0x4c01, 0x0) 00:53:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_io_uring_setup(0x391c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1005, 0x3d8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300)=0x0, 0x0) syz_io_uring_setup(0x1edb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x30f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) sendto$isdn(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="8100000007000000eb91c1001f1747e6539e299dec6da25cd4e5db097fe4b50c7a0900319cde63dc603bc400000000ea0000000000a4b79a4717b6b9d55fa10c50a1d0921822f36f494d5f921ef755cad53e9d256a649517bab649575d80bc560dd0b976ded70000000000000000"], 0x58, 0x44804, &(0x7f00000002c0)={0x22, 0x3, 0x2, 0x35, 0x7}, 0x6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000080)={0x3}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r3, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0xc8b602726f965275, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x404a}, 0x1}, 0x8) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:49 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="21c4daa4f426037a8e"], 0x9) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xe79, 0x416800) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) syz_io_uring_setup(0x4503, &(0x7f0000000080)={0x0, 0x5e7f, 0x8, 0x0, 0x1d1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x70}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000c, 0x4010, r0, 0xa626d000) 00:53:49 executing program 0 (fault-call:0 fault-nth:35): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:49 executing program 3: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x200dc3, 0x92a00) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffe, 0x401) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x440) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000003c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x80002008}) [ 925.511556][T24914] FAULT_INJECTION: forcing a failure. [ 925.511556][T24914] name failslab, interval 1, probability 0, space 0, times 0 [ 925.531259][T24914] CPU: 0 PID: 24914 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 925.540039][T24914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.550104][T24914] Call Trace: [ 925.553402][T24914] dump_stack+0x116/0x15d 00:53:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)=0x7ff) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x81000) [ 925.557725][T24914] should_fail+0x231/0x240 [ 925.562143][T24914] __should_failslab+0x81/0x90 [ 925.566909][T24914] should_failslab+0x5/0x20 [ 925.571408][T24914] slab_pre_alloc_hook+0x20/0xb0 [ 925.576340][T24914] kmem_cache_alloc+0x4d/0x280 [ 925.581097][T24914] ? vm_area_alloc+0x28/0xa0 [ 925.585758][T24914] vm_area_alloc+0x28/0xa0 [ 925.590199][T24914] mmap_region+0x74a/0x13f0 [ 925.594805][T24914] ? bpf_lsm_mmap_addr+0x5/0x10 [ 925.599645][T24914] do_mmap+0x77d/0xc90 [ 925.603708][T24914] vm_mmap_pgoff+0xe5/0x170 00:53:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x15b}) [ 925.608211][T24914] ksys_mmap_pgoff+0x2a8/0x380 [ 925.612979][T24914] do_syscall_64+0x39/0x80 [ 925.617394][T24914] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 925.623288][T24914] RIP: 0033:0x45df0a [ 925.627187][T24914] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 925.646803][T24914] RSP: 002b:00007f0d0315cbc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 00:53:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="660f38db807f5b0f01c3f20f2abb9333ba400066ed0f01d166b9800000c00f326635000100000f30eaeb1315009a00002901d9aa00803e0f5fe2", 0x3a}], 0x1, 0x9, &(0x7f00000001c0), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0x4, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000040)={0x0, r4}) 00:53:50 executing program 5: ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000000)=0x7) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) [ 925.655288][T24914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045df0a [ 925.663251][T24914] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffb000 [ 925.671352][T24914] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000000 [ 925.679352][T24914] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020ffb000 [ 925.687320][T24914] R13: 0000000000090140 R14: 0000000000008011 R15: 0000000000000000 00:53:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000000)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x6d7c, 0x1, 0xac}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) 00:53:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7e, 0x119d01) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={r3, 0x3}) 00:53:50 executing program 4: socket$isdn(0x22, 0x3, 0x25) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x6401) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x40200) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x1, 0x10) 00:53:50 executing program 5: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x10001}) 00:53:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2800000, 0x100010, r1, 0xc750c000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:50 executing program 0 (fault-call:0 fault-nth:36): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x200000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x67}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xdfd}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7f52}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040084}, 0x20000000) 00:53:50 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x3, 0x0, 0x1}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000140)={0x401, 0x2, &(0x7f0000000000)=[0xfffffe00, 0x9], &(0x7f0000000040)=[0xffff4900, 0x2, 0x800, 0x6, 0x8, 0x5, 0xfffffff9, 0x3], &(0x7f0000000080)=[0x4, 0xfae2, 0x3], &(0x7f0000000100)=[0x1, 0x200, 0xf71f], 0x0, 0x1}) 00:53:50 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x24702, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x5, 0x80, 0x1, 0x39}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil}) 00:53:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xc, 0x448003) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="266767670f01d10f01c80f01c926260fe026010066b8b48f51ed0f23d00f21f866350000000d0f23f8baa000b80090ef36650f01c5db15d006225a3e1296dd00", 0x40}], 0x1, 0x42, &(0x7f0000000080)=[@cstype3={0x5, 0x4}, @cr0={0x0, 0x40000022}], 0x2) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x1}) 00:53:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) [ 926.031751][T24997] FAULT_INJECTION: forcing a failure. [ 926.031751][T24997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 926.068866][T24997] CPU: 1 PID: 24997 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 926.077650][T24997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.087707][T24997] Call Trace: [ 926.091046][T24997] dump_stack+0x116/0x15d [ 926.095374][T24997] should_fail+0x231/0x240 [ 926.099786][T24997] __alloc_pages_nodemask+0xd8/0x350 [ 926.105162][T24997] alloc_pages_current+0x21d/0x310 [ 926.110272][T24997] pte_alloc_one+0x13/0x50 [ 926.114726][T24997] __pte_alloc+0x2f/0x1a0 [ 926.119058][T24997] remap_pfn_range+0x5c8/0x7a0 [ 926.123822][T24997] io_uring_mmap+0x23b/0x260 [ 926.128409][T24997] mmap_region+0xd19/0x13f0 [ 926.132910][T24997] do_mmap+0x77d/0xc90 [ 926.137002][T24997] vm_mmap_pgoff+0xe5/0x170 [ 926.141500][T24997] ksys_mmap_pgoff+0x2a8/0x380 [ 926.146517][T24997] do_syscall_64+0x39/0x80 [ 926.150921][T24997] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 926.156811][T24997] RIP: 0033:0x45df0a [ 926.160886][T24997] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 00:53:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x5c) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0x6364, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000280)={0x1, r5}) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x6, 0x8040}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000100)={0x4, 0x9, 0x4, {0x3, @vbi={0x3, 0x800, 0x1000, 0x59555956, [0xfffffc47, 0x7], [0x9, 0xffffff7f], 0x2}}, 0xffffff18}) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r7, 0xc0086421, &(0x7f0000000200)={r8, 0x1}) 00:53:50 executing program 3: time(&(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:50 executing program 4: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f00000000c0)=0x7, 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x694a00) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x279, 0x710, 0x7fffffff, 0x4, 0x8, 0x400}) [ 926.180503][T24997] RSP: 002b:00007f0d0315cbc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 926.189013][T24997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045df0a [ 926.196990][T24997] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffb000 [ 926.204964][T24997] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000000 [ 926.212938][T24997] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020ffb000 [ 926.220904][T24997] R13: 0000000000090140 R14: 0000000000008011 R15: 0000000000000000 00:53:50 executing program 0 (fault-call:0 fault-nth:37): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)={0x3, 0x0, 0x4, 0x20, 0x1f, {0x77359400}, {0x4, 0x2, 0x40, 0xac, 0x2, 0x8, "ca363de9"}, 0x8, 0x0, @offset=0xd26, 0x39e}) io_uring_setup(0x586c, &(0x7f0000000280)={0x0, 0x12ba, 0x10, 0x3, 0x21d, 0x0, r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 00:53:50 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4002) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7fff, 0x400042) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x3}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x0, 0x1}) 00:53:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) socket$key(0xf, 0x3, 0x2) write$6lowpan_enable(r1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) io_uring_setup(0x5785, &(0x7f0000000240)={0x0, 0x93df, 0x0, 0x3, 0x31c, 0x0, r1}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={r2, &(0x7f0000000180)=""/150}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r3 = accept4$unix(r1, &(0x7f00000002c0), &(0x7f0000000080)=0x6e, 0x800) accept$unix(r3, &(0x7f0000000340)=@abs, &(0x7f0000000100)=0x6e) 00:53:50 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x200}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xdc}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24048000}, 0x4004000) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)={r2}) 00:53:50 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000000c0)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000080)=0x9) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)) [ 926.411096][T25046] FAULT_INJECTION: forcing a failure. [ 926.411096][T25046] name failslab, interval 1, probability 0, space 0, times 0 [ 926.426448][T25046] CPU: 0 PID: 25046 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 926.435216][T25046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.445282][T25046] Call Trace: [ 926.448597][T25046] dump_stack+0x116/0x15d [ 926.453005][T25046] should_fail+0x231/0x240 [ 926.457420][T25046] __should_failslab+0x81/0x90 [ 926.462183][T25046] should_failslab+0x5/0x20 [ 926.466753][T25046] slab_pre_alloc_hook+0x20/0xb0 [ 926.471694][T25046] kmem_cache_alloc+0x4d/0x280 [ 926.476455][T25046] ? vm_area_dup+0x44/0x120 [ 926.480979][T25046] vm_area_dup+0x44/0x120 [ 926.485334][T25046] ? alloc_pages_current+0x21d/0x310 [ 926.490666][T25046] ? inc_zone_page_state+0x84/0x100 [ 926.495882][T25046] ? perf_event_mmap+0x157/0xcc0 [ 926.500835][T25046] ? __pte_alloc+0x131/0x1a0 [ 926.505444][T25046] ? pfn_modify_allowed+0x8a/0x190 [ 926.510652][T25046] ? _raw_spin_unlock+0x22/0x40 [ 926.515592][T25046] ? remap_pfn_range+0x76e/0x7a0 [ 926.520520][T25046] ? vma_interval_tree_augment_rotate+0xe9/0x100 [ 926.526839][T25046] __split_vma+0x82/0x320 [ 926.531168][T25046] ? vmacache_find+0x157/0x320 [ 926.535995][T25046] __do_munmap+0x28e/0x1310 [ 926.540510][T25046] ? up_write+0x25/0xc0 [ 926.544667][T25046] mmap_region+0x5ab/0x13f0 [ 926.549176][T25046] ? bpf_lsm_mmap_addr+0x5/0x10 [ 926.554021][T25046] do_mmap+0x77d/0xc90 [ 926.558078][T25046] vm_mmap_pgoff+0xe5/0x170 [ 926.562572][T25046] ksys_mmap_pgoff+0x2a8/0x380 [ 926.567717][T25046] do_syscall_64+0x39/0x80 [ 926.572128][T25046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 926.578076][T25046] RIP: 0033:0x45df0a [ 926.581969][T25046] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 926.601601][T25046] RSP: 002b:00007f0d0315cbc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 00:53:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:51 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) personality(0x8400000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x3, 0x6, 0xfff, 0x7ff, 0x7, 0x2}) [ 926.610010][T25046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045df0a [ 926.618000][T25046] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 926.625965][T25046] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000010000000 [ 926.633939][T25046] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020ffc000 [ 926.641911][T25046] R13: 0000000000100000 R14: 0000000000008011 R15: 0000000010000000 00:53:51 executing program 1: getpeername(0xffffffffffffffff, &(0x7f0000000180)=@hci, &(0x7f0000000080)=0x80) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000200)={0x0, 0xae, 0x5}) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a880, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x7fff}) 00:53:51 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) getpeername(r0, &(0x7f0000000000)=@in={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x80) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x1}, @register_looper, @request_death={0x400c630e, 0x1}, @increfs], 0x4, 0x0, &(0x7f0000000140)="b50f8162"}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x4c01, 0x0) 00:53:51 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x402) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x9, 0x7, 0x0, 0x1, 0x4, r0, 0xfffff800, [], 0x0, r1, 0x2, 0x3, 0x4}, 0x40) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0x8913, &(0x7f0000000140)) [ 926.698092][T10095] Bluetooth: hci5: command 0x0405 tx timeout 00:53:51 executing program 0 (fault-call:0 fault-nth:38): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:51 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x260103, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}}, 0x80) 00:53:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)="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", 0xfb, 0x0}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f00000001c0)={0x98}) write$6lowpan_enable(r2, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r1}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x521100, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x100010, r5, 0xc8000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x21000, 0x0) setsockopt$packet_buf(r6, 0x107, 0x7, &(0x7f0000000380)="a6129dedc04a3437541da0ae77e98d765677ff52672027e1c75c7424f34a844f0a2cc6b773449a344dafc4f53a059db384996e5eaca685c1f3fbbc9ca352e1f71cf38acf88cbcf4bbf0fd34bdc8209ec746347f1eca8c10ece490db5cca89c202dba05abc55fb008ddf3617ca202cb543fa7c69c5ff335c9e439edf4c476e2f0c8083283d7494134b800eedc25e9602d9c780e94a192a3aef469b21c2787c2", 0x9f) accept4$packet(r2, 0x0, &(0x7f0000000240), 0x80800) 00:53:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000040)=@ax25={{}, [@default, @bcast, @default, @remote, @netrom, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000300)=""/172, 0xac}], 0x3, &(0x7f00000003c0)=""/145, 0x91}, 0x40002002) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x7, 0x7fffffff, 0x2, 0xdededede}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x190}}, 0x20000080) 00:53:51 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x20000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x6, 0x200000) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x541b, 0x0) socket$isdn(0x22, 0x3, 0x25) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c43a98d5401373b7ec6374dfdf5768f4f7fcc220811438decacefceeacc83b2dac00fb8c519088f4deeb32128adb416022dd06e05940befdc0d6951e2f9c897b987d098e8bb45e0f015e541e7d573c5fef6a91bb6b7c4796d6d62e3faa0d4c20878e34fd66c818c1c1dea8649e84e73dd96a195165523f59ee", 0x79}) 00:53:51 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/80, 0x50}], 0x3}, 0x60) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x5, 0x5a9440) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0xe850bb295d7561}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000080)=0xfff, 0x3, 0x7) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={r1, 0x2}) [ 926.983962][T25108] FAULT_INJECTION: forcing a failure. [ 926.983962][T25108] name failslab, interval 1, probability 0, space 0, times 0 [ 927.015726][T25108] CPU: 1 PID: 25108 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 927.024513][T25108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.034558][T25108] Call Trace: [ 927.037854][T25108] dump_stack+0x116/0x15d [ 927.042295][T25108] should_fail+0x231/0x240 [ 927.046704][T25108] __should_failslab+0x81/0x90 [ 927.051466][T25108] should_failslab+0x5/0x20 [ 927.055963][T25108] slab_pre_alloc_hook+0x20/0xb0 [ 927.060894][T25108] kmem_cache_alloc+0x4d/0x280 [ 927.065647][T25108] ? vm_area_alloc+0x28/0xa0 [ 927.070228][T25108] vm_area_alloc+0x28/0xa0 [ 927.074641][T25108] mmap_region+0x74a/0x13f0 [ 927.079231][T25108] ? bpf_lsm_mmap_addr+0x5/0x10 [ 927.084089][T25108] do_mmap+0x77d/0xc90 [ 927.088154][T25108] vm_mmap_pgoff+0xe5/0x170 [ 927.092656][T25108] ksys_mmap_pgoff+0x2a8/0x380 [ 927.097411][T25108] do_syscall_64+0x39/0x80 [ 927.101822][T25108] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 927.107699][T25108] RIP: 0033:0x45df0a [ 927.111586][T25108] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 00:53:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x404c00) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000000)={0x0, 0x3}) 00:53:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x6, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x1, r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={0xffffff81, 0x5, 0x1000, 0x400, 0xfff, 0x3, 0x6}) 00:53:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) getitimer(0x2, &(0x7f0000000000)) [ 927.131223][T25108] RSP: 002b:00007f0d0315cbc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 927.139630][T25108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045df0a [ 927.147680][T25108] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 927.155661][T25108] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000010000000 [ 927.163627][T25108] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020ffc000 [ 927.171630][T25108] R13: 0000000000100000 R14: 0000000000008011 R15: 0000000010000000 00:53:51 executing program 0 (fault-call:0 fault-nth:39): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0xa2040) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:51 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x101080, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x8}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000100)={r2, 0x3}) 00:53:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7ffe, 0x501200) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) [ 927.425673][T25145] FAULT_INJECTION: forcing a failure. [ 927.425673][T25145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 927.441691][T25145] CPU: 0 PID: 25145 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 927.450453][T25145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.460499][T25145] Call Trace: [ 927.463794][T25145] dump_stack+0x116/0x15d [ 927.468118][T25145] should_fail+0x231/0x240 [ 927.472538][T25145] __alloc_pages_nodemask+0xd8/0x350 [ 927.477816][T25145] alloc_pages_current+0x21d/0x310 [ 927.482914][T25145] pte_alloc_one+0x13/0x50 [ 927.487322][T25145] __pte_alloc+0x2f/0x1a0 [ 927.491636][T25145] remap_pfn_range+0x5c8/0x7a0 [ 927.496394][T25145] io_uring_mmap+0x23b/0x260 [ 927.500977][T25145] mmap_region+0xd19/0x13f0 [ 927.505570][T25145] do_mmap+0x77d/0xc90 [ 927.509641][T25145] vm_mmap_pgoff+0xe5/0x170 [ 927.514175][T25145] ksys_mmap_pgoff+0x2a8/0x380 [ 927.518941][T25145] do_syscall_64+0x39/0x80 [ 927.523357][T25145] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 927.529244][T25145] RIP: 0033:0x45df0a [ 927.533138][T25145] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 927.552745][T25145] RSP: 002b:00007f0d0315cbc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 927.561154][T25145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045df0a 00:53:51 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x304000, 0x0) write$qrtrtun(r0, &(0x7f0000000040)="e4bc12bb7ec60bb94dec1fec37dd86ca170e997db5af8054e0894faf6f426ac08e64cfd347f1fbff1806f5eefb9b53d3f3d80ec455d1c134b1d1fe7c8e109de5bf5f8fc0b5b52bb21b91368a2c9538123b4b06165125f51f56", 0x59) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x400448c9, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) accept4(r0, &(0x7f0000000180)=@tipc=@name, &(0x7f0000000100)=0x80, 0x80000) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) 00:53:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000180)="c86854a40ac955dfb47ba52123e745be81e702dbc5e27504a4f52f4fae514f28eea41b2338a1246ceffe108f9d7e5faf429f6775e87c9faa4eb6746c2c5786f5839c95a475a02fe673019be44b535def329fb8bcdaa340f5aa0bc3b14f8bd2a34b626b9d9ada056947197ceac5be279ba86512260e584c669972956c9dd11b8f3c3e8f0552b1f4b85d7c38346dd8520a554eabe9793502e59b79e297eee078012859ba61d4cc84dc0d5b57f3dab2aa4aa85784a8567cc2d4ea8ec773003ba6ef0ab8e3cf58c8b578afaf3cbc95ed36a60efb11e176aac74a4864b079a25fb729f9bc68fdb4602eedb0a994cdf3936b494114b3c05108eb53de07ba890f5e5222bdb9653aea4ef276cbb798a8e3539753ab9b5596df09a1eb1d7084bfe0d35cbc5a56d0870829bbed7c332b40ec938a7988dd95ffc0d4e44a336fa0e2f5758970608b31e3b2c2cae3e9a8e67924271a6bbbca9133964f31634a3a8b8a82d46a3a85b137b5cd12af717f228ed1fd6e23f5e27af73c4129745f47535b34ad19d9f6511997205a7cdfd3bf4ac8e477fb4b7356ddfc6e924c81492c93a45c71efa2e10453e83f39ed28a9e5bf7cf820cd3c235a3afe848a96b6b152f070781edf2c257777ac360f00650d5b45330aa9f120e88b0bc1192b36637e4936158cc43b46e25328344e185e01a6d59f0dfaddd59908b38a8064e26b7fc01b99b81d015645d69ba0796d12ea44b73cad0fdb0fc96e0bbc2cf700528cefee1077b3a81ef0a7eb7c33aefd37a36fdd8a8796f12359bfca775cfc346b391365ed305d8950b0f9d42ead1d0a9b079ddfbcefc53b0c20a4cee148dfba708a05a9689fba2dc900bce3d40f6e9bfcec2ee6dfef5baf72c792ec21878dfc9742175467ae713d234c96129afd9e2fde6596645e57e2f8b30cc81b96b98e7f9cfa272d8933b7f43cfdf1cf0fec82720fc133f44bc777f0b0cfdfd580bd10c2e379e2d2b5a870cc83f3718886c5d7985f8ffffdcaceda3637467ad48b8a9dba8f5b66ff7ff1b1d0dbc5815d261b1113ca20efc1fb826a836416469c30ff11ae841b449d1fb837fcda55d6c2626eec543166478d1c738d92d0aca1ee2d2048cfead4bf2f4604210f16b6b979c49ffc4fc908059f9e4c3349965596b5e78d1424a8feeeb7423a013951db83b987df59b1959926c30e81fe501dbbf93be9e16e6e13865a7ce67679d59a5f4362884683c9096201d06000489e806154677f29a54da59ed84c5663af3c82ce84ed42f10f9526522f948892ef5ed0adc51fef2ffd5f04c2b0cad4ff3ad86e3c7c29a7c79d414266de10d670addb1b5769ac99a11f19c141257d2fd752f9c41a096487b773ddd593ea62f543796e3aa7e853027d0219c2d4ee47512502874f103dccee22aaf8376f2e264948d628cc2739d83b2389a3604c691b549fdedc7207f74bef193f4a9bacc5295d9bb157c9177931fd60f276eae817997d8cecac71fcd21865da5757d04fe11b74790fca01379f448485b928852d864fd5b4d9f785dc38eade1cdc2d82aaa4c4574f35de0feae4364307443b1c145a425dc69fffa6629295dc624f8059573e972af652899f086a008f7f47d656f850114814a9668e274cd09b2d27dcf1157c62d4ed55d2954299fc4a3e267acf39b71dc4e51c3f0eca82f3cd0c3a9966a2a16db99a3a46f8130b5e7186810dcb471046b0909d76dcd73a3dbb083d1c05f027056c8a86c4c157062bec14b40a1fece7511067809cbad1ba8351a1ade07f58384d9e341eb694182cd4857ca247f25e9db85a003d1326bdf649c4be9698659340b4e3cb908fac52dd7808ffdc22c37e7f7ad1ce68354a3a9ffff6d5f95105eae5e26858c223f2ecd15da30295e7b3374f610c254aeb908395c65f9599834875ee82d140373d0ecb7869e9efca6049c647c37c8e4b0f34e5ad46a42f5c76a263a277b6eb586fac4851c0b6253139551987859c4b05693f58812fa08cce10de5c97ef5e7b5d3fbc25dd335eb052d0dbdfcdbe9dd526a6ad19fb20dba3f0bb14f6fcc69ec23639fb08056bd43b7b4e1fc01f88e4326fd4a53c7593a5f5508a6fcd187047f82e1ed8313fb9676156e3bbdd3d7e691bc609934545491dfba9da5d4f8170e4ffc5504a80f0a9b34f00b2a22f220c4cd90c8cf21141d49b22bde5aed06f732907dc586a8f6a90eae4d758da8a116f8b36c454a9b5b6642f7bddb1b5aee074be4a3ca2dd338ea27df8eebb25f43137086be0113430b9bf7f4dfacd56e25d98a9e34d1612ca5bd0e9e839f9cfb2904222b01caa4506166882293a660d0fefa45f2ee61527ae16aaa797a5475ebafd2003a297ca6b7e60b69a0d7d02893734fbfeab1607a0de9c06b459b4543d65ab6ca33773e21bf410bb4f3addd47a7fa3240ed2b43591914f3e2820df0cd06f385a8c3ec2dd9c8d9de2ce24bcd5a65e58497e36bc0edd103c0513eccba783c0df6084f05fbd462401dae78f3e47f83740116bbeee5c4b2c428f8843757913156c4656003ed41bcc73beb6ede86654449ddca6862005a0fe70b25b1d30892cbe172003c77eb930a4cd26982801dc48018f7efa12fb85acb0e1a278e486fc9e9d00f1dc3ee7f77397b6e0432bd86d145e41d06b2721752a60043f3b2294ed2bf39ab799e6f673d409131f8e80819e8d1066740db23fc8fc227e1e685f4bfee58c89c172c7643150c6ae0d7fa0e9ab32449d6578c6c68ab63cdc03b830f43039d89841214996a78a36a4fc9c4dddfdc92ce77dacda7582ad945dfaab1a9a279bc14320b359e2e91b3ed8f46d8496827072e6ef45e5ad6f25ed4d5407ff5d11ee2de3f495849ffb675f3fdc91e1fda9041aaf3ddce2301be224585f8a395f1926c5f5dde792649c75464c1d3378fe896f10db0b088c3a39dc213848f9323c082773cc810f165bc542169215a7aba8a056452f5e1832e556ea705e3587ee0bbcba867ff89ac11b8ecbf1f9fe9d22bee44b200de4f0a18f327764416a2f44dd7b9d376b8eaa78b414866b359f61f90742bd9b66c4be753f60033e99fe0466d85b289e80f2aad207e87eb386ad9a451001acc601470caf6a4264df692c066d5c0f9f647ba6d059d8faba6ffc5b51b3fd4b12967141246e5fa971e5068ee5d546adaf5a6e092dc985ba88c3fce023e581a7368b66a24f996f099732e9808c13ccf53d6e93ea91dcaf19ee86a3e8628402e7482328e2a0ac8b40da0465f43646353b0eaf87537550c54c10f2e0a89a680ed999c9ea04b09cc8f62ec585743e1384cff8a86b6849cb69d6c77a03066db507e2667fbd4bb7cb2539d67e1ba50273532b6036a6b34f78ef2c7beb4b46c4c63604f4fa97ebb7881e66ba0e818141139bd2fab86663e52f76aaffeb22f85817aa32bf3a131214ca7d5412f61e90bd92823400d5bb6a8b3d2e7005d16532260542215db81c7b05a657b3996055ff922142af9fadb7dd86f4a6deda1bbfad58dfdb716ee134e7cdf2ce025bbeae377ee5a0293ead4d0a281be234b28505950e6774d3bd16ce7bbb6c9282dc06e2643f6fe46634bf4cd96ab3cac0d04640692176befe39dbd30cb058666656ca895c1957b43bc0e0654a2b365316777f0002411343fe67f62d332dead272e06eec8bc2348faa9bdce99d5e9285e43507baf3f9d595f542de97b04df73a8fc315ce0a06cac7f60f4a7452d057c68c98165bad86ff1c5746107482967f94d150d34bd58023e05ccaead87f7d1b2494ad072cb4f9409c0be3d6c36ef0206953cb37341c2a9420d2a68cbb23287090bf6aa50cc63c6532d9793034d49c719419e06406ed2132c2fda7dcb0b63c203423a5925ef32251068ecfad91a87f15261e431c85eef1365a78a8d96fdf5f8106556d915e103185285ec4a5720c80677be5734c830afbe6c39c723e09794ec255103563b47daa5070912c35075989d4f62f9f397246d77e855e62b581a465895321d65226db0f16a2c7d231228ab88bdfc5fb7d0de6d888c0f359d5005afcb3a45a36dd4e107144dcc535027e3837cd9c1d161e874606c6cad363d5c9298dfc11281567fd308e08b20f1a382d14fe5c98a190fe0a92f3bc3a2b07cd63e9d25bcca4c4307be53e8efd7925b4ee881b4612535a327c6ac77e1095b34e3e0d3a59f630cdce3ea1d23276875263d873ee4da9663e854a0e398f9193101fe4834c8b9d0f052caacab35736b6f73fc7683e5b87ef312614a006be240046351177d7f5c025096514de069b681ab2bceb84a9ddd5194c8b211ba2b3ba2933800ffd4aafd781b7d87faa0f3e0720558eb90e1fa676ee708b63469fecff103ee4128d4d2fb2d04b5fe6ca25b2eff440979c4e97348bafdf858aa4c0b040e175203b4aa59bbf924a01131c4d4c5c7e092751bcc78e35816019428d7f55aa118582dbe9ec018e6c635787a8bdc5c403ae37e17981f46268f39fc31687434372f07f82584b52720f2091004ba537bba222340191d3a5ceac12b1bc3e1acd3998560f514c1ba12a475a1426763f5d7452744aff8c0475e9ba459cd9446b992885d1c6b5a8cab5da427c9a33d10e55e7d8a384a27a03e15deee250012bee94b400a0d0be458363ef34f75eda0ee0a3c907d60aa4019741488b5d3d823e72276e0ea66ddf14f4399d40be59515d81d58d33596754ab6fdec8b8e5bdc5a0dcd23baffd0644f62f54c91b81cf7e8597a57acfbdd08c92a3734ef5ecd14ed800802a97cdaf76fccf9d8af9403e95bb2ae90e0586e72cbcb1218133dfcd0b0f0310e9cebd13a19f7e1d9f6ae51497ecdef0e6d7478cdb64bde2312ea5d69d5f26422427b82fdc4703d51538bb197ad32d2a0b15a312093be42b186e8d2e77d8d3662a1478228ffe4478ff058961c12d82f7936f9ad448891ab7be4165e15b2d3c0a30d7273d738c88169efe2143cd684c1ea943befedbb40463566b40862c268e4981eea5076d75d6cf85211f5e3640baec0dd9b58f59da8b95b7496774c8a18df0397c561517df5b8e72165a9bdf5570e8aec0717ee1cd629ea0dcc509678bed13689d533deba1370dedcde4908879f8138833eec56e8351b644fb41966f8543bba5c105cf4764876399575b01af5474699add53b9341fdaa5b6d785625a386fe412428596e4776b89a2380b5e771b4e0b303e5d7721c045f50c10f6485b36d8de0024bc5a1a299470b37c8d8ca0c311163764be557d737c8f84f4be45bd3b836d0b8036df5caed6a4be6270a14ac52530e4343cc9de568d7afa601ecbef40832c0818f176be348ba8232298ed8a18f2000dde0e09b7f580eb7e919de55a55ab909099c240572707777277fd41d2d25e49eba423a798411aa47c98d2db9c510df38463e907db747bb5dd115e8eea08fe0143adc755a11c544448b7b233df4aef996e80862727ab833ce01d77f8db76e1d4eb0c21f6b7ef8394fcd01ee6bc770dac142903ac0af2e741eb3c591ba44f290dc37ccbaad1dfa6d0eff795de3f217ce277414b33ce285977e57530d7bfdb0efd186ca9da425455334288f6d1ff54ed8aba2e44a16d50150f108ddf75cdf3db53aebef549ecbe9ce266a04ddb64a1433cad041435514d100688c5335301e72492739267639b0ecf57d79d307bb04dd50efea147dd695d732de5df75b5b7cd3069044fa5cddb7b17bcd6c9f8354cb15b1728c60dea50baca952439aa17b8887fb7a634abcb7b3b521fe500a5741aa638895e63c6b2a6ddba1aa905fa94091e48a1621f383190f52c3af642f3b9bb26122ed86aeb3be12a32f24269fb7f9c2c", 0x1000}) 00:53:52 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x58a, 0xffffffff, 0x80000001, 0x9}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x800, 0x20, 0x9}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x20, 0x280100) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) socket$l2tp(0x2, 0x2, 0x73) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xc0, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0xb, 0x3}, @fda={0x66646185, 0x4, 0x1, 0x12}, @fda={0x66646185, 0x6, 0x0, 0x16}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000dd16b84b", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a6873010000000300"/36], &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x840}, @acquire={0x40046305, 0x3}], 0x9c, 0x0, &(0x7f0000000380)="125d877de3eaad55544c193ef973ea644581c47faea2a314053dfb793622a72f553485703221eefa4288bdcd583e4f8950bad081d089cfa1f045fc4138a5ec9ca200dc71085a6f7a3a61331e8b76c07d4605677367a877f93098ec98898359c00117380d90020310246f0f1b335c002d2b1dff7b6578b51c19dc2885a738d5f1df23d6c1ccd209bddba97d95db5b17db29ce0264a318c97f5a691edf"}) 00:53:52 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x9}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) [ 927.569120][T25145] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 927.577090][T25145] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000010000000 [ 927.585137][T25145] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020ffc000 [ 927.593208][T25145] R13: 0000000000100000 R14: 0000000000008011 R15: 0000000010000000 00:53:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x480) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:52 executing program 0 (fault-call:0 fault-nth:40): syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:52 executing program 2: ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000080)=0x4e4) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x480000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x1) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x208000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:52 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x14}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x400448c9, &(0x7f0000000140)) 00:53:52 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x20000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000080)={0x0, 0x5}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f00000000c0)={0x7, 0x200, 0x1ff, 0x5}) 00:53:52 executing program 3: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x10000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x6a573e013bd7ed30, 0x1, 0x1, 0x4000}) 00:53:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x400) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001380)='/dev/dri/renderD128\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000001840)={0x200, 0x7, &(0x7f0000001740)=[0x800, 0xffff, 0x7ff, 0x3f, 0x8, 0xffffffff, 0xffff], &(0x7f0000001780)=[0x10000, 0x6, 0x4fc6, 0x2, 0x9, 0x3, 0x7, 0x7, 0x200], &(0x7f00000017c0)=[0x2, 0x3, 0x9, 0x4, 0x9, 0x4, 0x401, 0x1f], &(0x7f0000001800)=[0x0, 0x9, 0xd2, 0x2, 0x43de, 0xfffffff7, 0x3ff, 0x1], 0x0, 0x5}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000240)={0x81, 0x7f, 0xc2, 0x7, 0x18, 0x7}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000002880)=""/4104, 0x1008}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000001100)=""/227, 0xe3}, {&(0x7f0000001200)=""/110, 0x6e}, {&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000001700)=""/16, 0x10}, {&(0x7f0000001340)=""/10, 0xa}, {&(0x7f00000013c0)=""/202, 0xca}], 0x8, &(0x7f0000000100)=""/262, 0x106}, 0x40000002) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000001880)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) getsockname$packet(r3, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000016c0)=0x14) 00:53:52 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)) 00:53:52 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3f, 0x8, 0x4}) 00:53:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'vcan0\x00', @ifru_data=&(0x7f0000000000)="f6caa63469e87e70d194d1034c65b0e9e19a2abb328310516f34ffdd71b6cf98"}}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x18000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) [ 927.931060][T25187] FAULT_INJECTION: forcing a failure. [ 927.931060][T25187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.975695][T25187] CPU: 0 PID: 25187 Comm: syz-executor.0 Not tainted 5.10.0-rc5-syzkaller #0 [ 927.984489][T25187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.994559][T25187] Call Trace: [ 927.997988][T25187] dump_stack+0x116/0x15d [ 928.002326][T25187] should_fail+0x231/0x240 [ 928.006780][T25187] should_fail_usercopy+0x16/0x20 [ 928.011801][T25187] _copy_to_user+0x1c/0x90 [ 928.016223][T25187] simple_read_from_buffer+0xab/0x120 00:53:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x3f, 0x5, 0x4, 0x0, 0x1e}) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 00:53:52 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="660ffb2c66b9ee02000066b89964ffff66baffffffff0f300fc75d6e360f0179d7baf80c66b8d489fe8566efbafc0ced360f1c150f1ea8ceca0f01c966b80080ffff0f23c00f21f8663501000e000f23f8bad10466b8f7ff000066ef", 0x5c}], 0x1, 0x0, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0xa, 0x2, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0xa8, &(0x7f00000001c0)=""/168, 0x40f00, 0x8, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x6, 0x3f, 0xffffffff}, 0x10, 0xe692}, 0x78) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000380)=0x1, 0x4) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) [ 928.021598][T25187] proc_fail_nth_read+0xf6/0x140 [ 928.026534][T25187] ? rw_verify_area+0x136/0x250 [ 928.031391][T25187] ? proc_fault_inject_write+0x200/0x200 [ 928.037027][T25187] vfs_read+0x154/0x5c0 [ 928.041190][T25187] ? __fget_light+0x219/0x260 [ 928.045866][T25187] ? vm_mmap_pgoff+0x133/0x170 [ 928.050635][T25187] ksys_read+0xce/0x180 [ 928.054794][T25187] __x64_sys_read+0x3e/0x50 [ 928.059303][T25187] do_syscall_64+0x39/0x80 [ 928.063731][T25187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 928.069618][T25187] RIP: 0033:0x4177b1 [ 928.073517][T25187] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 928.093115][T25187] RSP: 002b:00007f0d0315cc80 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 928.101582][T25187] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004177b1 [ 928.109559][T25187] RDX: 000000000000000f RSI: 00007f0d0315ccb0 RDI: 0000000000000003 [ 928.117528][T25187] RBP: 00007f0d0315cca0 R08: 0000000000000004 R09: 0000000010000000 [ 928.125505][T25187] R10: 0000000000008011 R11: 0000000000000293 R12: 0000000000000028 [ 928.133472][T25187] R13: 00007ffc48ac50af R14: 00007f0d0315d9c0 R15: 000000000118bf2c 00:53:52 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x4}) 00:53:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x8}) 00:53:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x1) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x4) 00:53:52 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffc, 0x1c1c01) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000080)={0x36b1067f, 0xfffffff8, 0x10000, 0x18, 0xddd3, 0xfff, 0x5}) 00:53:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x80000001, 0x40200) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:52 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) sendto$isdn(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="ff0700003acd0000a06b48a459df9ce2f5f9bed4f75ec4c24647529216051e2f9b36bad2568259f5cc0054b51582621dc58974a5ab8cba2a357452b27343749d7da767b0deab6c845db38852283c41c5d85064ae0d29f86b4cae0233b38cc7c933255e8458a22d46068556eb05dfc3440f7957728d1a63831f752614427f0000000000000068309a9cf6ff367cda2a2cfddbe39b53af3c6936b3f03b841d32c1313da1d4ecdaca8800629a058df545e178c55d3e8326e17401c709824a1b8180e806fe01196b0804ce70b07bd35bd06f4fff4dbbfdd8bfa51630ee56e0260c8e6246d84d76ab6637a74a8565785774a735144610e01798cde63d8e0ad2d7fc53d56a53"], 0xba, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvme-fabrics\x00', 0x4a0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000580)={0x0, 0x2}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r2, 0x2d115000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r5, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x5f, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) recvmsg$can_j1939(r4, &(0x7f0000000540)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/122, 0x7a}, 0x2142) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000180)="dff30adb01256a69ba8484e4a3a6d815489fce567e1e2115fe16fb556d2a41c58fd142fb5181f15fd1bb563cf335ec8ad428aeea78ba40592eaec3fbddd407c20fc01b00ad4263f792e77eb74024922f13534e96c7586c2f242092e671a412024a1ad19919d0b6f4d594f3091d83529204e6c65408ec689cfd18bc40cf25b0471f099a20e8bc9111b472a22fc21b4ba15fce4e47283ff63f1e63901a3511f63bca6021f0feb99b30a842aa7e06e3b877b387d03594033dc0f648d7f273c833d8fc143d614c841eb5", 0xc8}) 00:53:52 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:52 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000000)={0x35, 0xcdb6, 0x1ff, 0xeeeeeeee}) 00:53:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) clock_getres(0x6, &(0x7f0000000000)) 00:53:52 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:52 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) accept4(r2, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800) write$6lowpan_enable(r1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000080), 0x10) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x541b, 0x0) 00:53:52 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) 00:53:52 executing program 3: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x80, 0xd7, 0x3, 0x40, @dev={0xfe, 0x80, [], 0x38}, @private2={0xfc, 0x2, [], 0x1}, 0x700, 0x700, 0x7fff, 0xfffffff9}}) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller1\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x3) 00:53:52 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a100, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x8001) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000005c0)={0x5, 0x6, 0x786067af, 0xfffff69a, 0x101, 0x8c27, 0x11}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0xa, 0x4, 0x0, 0x5}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dri/renderD128\x00', 0x90100, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f00000003c0)={0xe5f6, 0x8, 0x3, 0xfbfbfbfb}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000180)={0x80000001, 0x3ff, 0x3, 0x752e}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r5, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000080)={0xfffffffffffffffe}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x200840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], 0x2, 0x4, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:52 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), 0x4) 00:53:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x294080) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) munlockall() ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:53 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x4b6a00) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x80040, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x7fff, 0x0, 0x2}) 00:53:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x10100, 0x0) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f00000003c0)=""/251, &(0x7f00000004c0)=0xfb) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:53 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:53 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x280800, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x3ab240, 0x0) syz_io_uring_setup(0x391c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3d8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_setup(0x1edb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x30f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd=r0, 0x100000000, 0x4, 0x7ff, 0x3, 0x0, {0x2}}, 0xbb19) write$6lowpan_enable(r1, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x140010, r1, 0x100000001) 00:53:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 00:53:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x400004) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:53 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x524081, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x8, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000100)={r3}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) 00:53:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x200000) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x30}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x401, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0x7, r2}) 00:53:53 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x200000000, 0x30800) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x20) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0x4, 0x2, 0xffffff25, 0xcccccccc}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x6, 0x2, 0x0, 0x3}) 00:53:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x6a242) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0xfffffe00) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000000)=0xd42) 00:53:53 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x240000c5}, 0x20000040) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x331742, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x541b, 0x0) 00:53:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={r1}) 00:53:53 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:53 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffff3031, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x2}) 00:53:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x101000) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) socket$isdn(0x22, 0x3, 0x23) 00:53:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x9f299ccd03a135d1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) syz_io_uring_setup(0x391c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3d8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_setup(0x1edb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x30f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) syz_io_uring_setup(0x391c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3d8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_setup(0x1edb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x30f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3ff) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x10001, 0x5, 0x80}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:53 executing program 5: syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xfffffbfffffffef8, 0x480180) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun\x00', 0x2002) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x59aa2d590352bbea, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x8200, 0x0) 00:53:53 executing program 2: personality(0x400000) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff5000/0xb000)=nil, 0x10001, 0x1, 0xa0}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x67ff, 0x6, 0xffff, 0x7, 0x2, 0x8, 0x7}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xe88, 0x8400) mmap$fb(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xa, 0x40010, r1, 0x72000) 00:53:53 executing program 3: mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/4096) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x8001, 0x3, 0x7, 0x400, 0x1, 0x81, [], 0x0, r1, 0x0, 0x1, 0x2}, 0x40) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x3, 0x2, 0x8, 0xfffffff9, 0x16, 0x8}) 00:53:53 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:53 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil}) 00:53:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) socket$unix(0x1, 0x1, 0x0) 00:53:53 executing program 3: mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x83000000) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0x222900) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:53 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) shmget$private(0x0, 0xf000, 0x800, &(0x7f0000fee000/0xf000)=nil) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x10000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:53 executing program 3: syz_io_uring_setup(0x391c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3d8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_setup(0x1edb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x30f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) syz_io_uring_setup(0x391c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3d8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_setup(0x1edb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x30f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4004, @fd, 0x6, 0x2, 0x1, 0x15, 0x1, {0x2}}, 0x9) r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0x4c01, 0x0) 00:53:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) shmget(0x1, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) 00:53:53 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x0, 0x400, 0x7, 0xffffff81, 0x8, 0x5}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:53 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:53 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x80000000000000, 0x0) 00:53:53 executing program 2: r0 = socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) 00:53:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x1000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:53 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0xb) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 00:53:53 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) 00:53:53 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x100010, r0, 0x89ff3000) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x4c01, 0x0) 00:53:53 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) 00:53:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x3}) 00:53:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:53 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xa}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:54 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x20, 0x12000) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x10001, 0x0, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000100)="fe287e24c6f81cd78bcba0c25edd06cfc3782f57a4bb47715c274f3318b23552e167f22722a282e686d821bd955728f6e37ceb10f7ef701336593124a2567987499db059a4391d341e7babe6597e5d5957242187eebe694d6e665a59e928691b421ad57a1e487ffc0316a4aa24dbe557a37faff25e261d60740d260e35fb8a9b3f2fc8c66e43a6a82a", 0x89, 0x4000080, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0x6364, 0x0) 00:53:54 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) userfaultfd(0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:53:54 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x44004}, 0x4004080) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:54 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={0x1}) 00:53:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) 00:53:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5, 0xa, 0x2, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:54 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xb}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:54 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) shmget(0x1, 0x11000, 0x10, &(0x7f0000fee000/0x11000)=nil) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x1) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0x3}) 00:53:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x1, 0x20}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000100)={0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) munlockall() 00:53:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x41) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nvme-fabrics\x00', 0x800, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000840)=0x4) 00:53:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x101, 0x400200) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:54 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:54 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8000000000000007, 0x193301) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:54 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x480000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x90c}) 00:53:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x800, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000100)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)) 00:53:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7, 0xbc542) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)=""/26, 0x1a) 00:53:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x40440) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000000)) 00:53:54 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:54 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000080)={0x6, 0xeb91d3b, 0x8, 0xa0, 0x0, 0x8}) 00:53:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="dd91a79f023033c9060620"], 0x2c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44030}, 0x8081) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x40) ioctl$DRM_IOCTL_RM_CTX(r2, 0x8913, &(0x7f0000000140)) 00:53:54 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x7) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) 00:53:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x1, 0x6, 0x4, 0x2000, 0x3, {}, {0x2, 0xc, 0x1, 0x7f, 0x5, 0xed, "ec7ef84f"}, 0x8, 0x4, @userptr=0xfffffffffffffffc, 0x400}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x12001) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x3ff, 0x4, 0x1f, 0xd2e}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 00:53:54 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x204000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) syz_io_uring_setup(0x87b, &(0x7f0000000040)={0x0, 0xb310, 0x4, 0x0, 0x214}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:53:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x553933d962d94580}) 00:53:54 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:54 executing program 4: socketpair(0xf, 0x4, 0x6000, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/44, 0x2c}, {&(0x7f0000001200)=""/229, 0xe5}, {&(0x7f0000001300)=""/12, 0xc}, {&(0x7f0000001340)=""/103, 0x67}, {&(0x7f00000013c0)=""/83, 0x53}], 0x7, &(0x7f00000014c0)=""/227, 0xe3}, 0x20) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) 00:53:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x109c, 0x0, 0x32314752, 0x7, 0x1, [{0x506, 0xffff}, {0x800, 0xfffffffa}, {0x7, 0x3}, {0x9, 0xffffffff}, {0x34}, {0x8001, 0x1}, {0x80000, 0x4}, {0x4, 0x6}], 0x0, 0xff, 0x2, 0x1, 0x2}}) 00:53:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) socket$kcm(0x29, 0x2, 0x0) restart_syscall() 00:53:54 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) membarrier(0x10, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x2}) 00:53:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x301100) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:54 executing program 4: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x40800) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:54 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r1, 0x3}) 00:53:54 executing program 2: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440), 0x3, 0x2, 0x4, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1c, 0x8000, 0x0, 0x6, 0x581, 0xffffffffffffffff, 0x6, [], 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x40) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x2400c081) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) munlockall() sendto$packet(r1, &(0x7f0000000100), 0x0, 0x40002, &(0x7f0000000200)={0x11, 0x1a, r3, 0x1, 0xf1, 0x6, @local}, 0x14) 00:53:54 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x54040, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0xbb2603c5020f0e90, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0xa08, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2a8b}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x4) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x541b, 0x0) 00:53:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)=@buf={0xcf, &(0x7f0000000180)="580d24e2834b78ad323d46b00338dbe9d4137f547544017529f142b80accc138c710bbfb695fa5552872968a14f3c43882f3b465e5c1f63607ea6027449ec9c04a0b2c739bb36cd713cf325348f3d1292d9802fe2989169a3608536d545b26eba22e2c68aa54b14d3d866bb32b9e2dac6669954654a0de9d30d69638ce8c0a09a7460c163faba9d62b931f01c1e568ba84cf9f99332e6924a2b17bdc63dba3366bd248c99253dc5fa9d71ff5d6cac6ec3290ea1e277a1a924fc8591219d3c8d7a6a0f7c253f41e04abea53f684ff7f"}) 00:53:54 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fff, 0x228000) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x0, 0x7bb, 0x80000000}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) 00:53:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x42000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x804) 00:53:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2000002a, 0x32445caf5cf344e6) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3000000000000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) 00:53:54 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x11}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x100000000, 0x1000) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000080)={0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) 00:53:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) clock_getres(0x2, &(0x7f0000000000)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000180)={0x0, 0x1, 0x1, 0xdededede}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x6400, 0x0) 00:53:54 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x6, 0x8000, 0x3ff, 0x5, 0x2, 0x10004}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x541b, 0x0) 00:53:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x20000) socketpair(0x3, 0x3, 0xfffffe00, &(0x7f0000000000)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=[0x5, 0x3ff, 0x4, 0x9], &(0x7f0000000040)=[0x0, 0x7fffffff], &(0x7f0000000080)=[0x6, 0x7, 0x5, 0x7], &(0x7f0000000100)=[0xffffff80, 0x1000, 0x40, 0x38f7dafc, 0x4, 0xffffffff], 0x0, 0xffffffffffffff8e}) 00:53:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:54 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:54 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x1, 0x10000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000040)={0x800, 0x8, 0x3, 0x5, 0x0, 0x9, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1, 0x3, 0x2}) 00:53:55 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) restart_syscall() ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)) 00:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)=0x3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2, 0x101}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={r2, &(0x7f0000000280)=""/84}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="e00000001500000428bd7080fedbdf256d6f7275733634302d67656e65726963000000000000000000000000000000000000000400000000000000000000000000fe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f62d1a121ff6079a920b385700354200000000000000000000000000000000000000000000000000200000002000"/239], 0xe0}, 0x1, 0x0, 0x0, 0x20044010}, 0x10) 00:53:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/139}) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) socketpair(0x1f, 0x5, 0x52c6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r2, &(0x7f0000000180)={0x6, 0x4c0, "646175f1e0d124ae54f50d286447833466faf29ab8fde8928775e809015ce1bc18a8a7ac3fa3b2592d971e1d63a319e787643acb6af0ecc5a2984307c9c482f4a53365542aa4b85fab42a84c5bc2ccd0d87eb5cf50bb9e8193859a2829af7e90ea6df2fe0550049fe9b62632242d6c9ebcf2a047f706887e10dcaf8a38d515d20c0d00c4a45bfe3c523ff8bde7af9fb73281f955440d0f047446f8de65882886aa0bc504e8e09d6a17d5870404d41a9fa99863293f14ae2529378c78160c7a0ce9847318d5b1798e6e02a2a92bdd2b8e9493"}, 0xda, 0x4, 0x0, 0x0) 00:53:55 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x66a802, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x13}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)={0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88841, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/225}) 00:53:55 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:55 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x25}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x4, 0x4}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x2, 0x0, 0x5, 0x3}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x40801) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000001c0)=0x2, 0x80000000, 0x6) 00:53:55 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:53:55 executing program 4: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000300)={0x2}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200800, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x6, 0x8, 0x5, 0x1}) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x34}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2, 0x80000001, 0x10000}) 00:53:55 executing program 5: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:55 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x40, 0xffffffff, 0x1, 0x8, 0x8, 0x9}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x7, 0x400, 0x0, 0x101, 0x0, 0x8000}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x400448c9, &(0x7f0000000140)={0x0, 0x2}) 00:53:55 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x8000) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x400) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000000)) 00:53:55 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x6e0140, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10b003, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2, 0x7fffffff}) 00:53:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) prctl$PR_CAPBSET_READ(0x17, 0x25) 00:53:55 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x60}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:55 executing program 4: epoll_create(0xea) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x402800) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6, 0x204800) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:55 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x2101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x0, 0x2, 0x10001}) 00:53:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x4800000000000000, 0x2, 0x6a}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:55 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x66a802, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x13}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)={0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88841, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/225}) 00:53:55 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x8001}) 00:53:55 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x90}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:55 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 00:53:55 executing program 1: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf, 0x4010, 0xffffffffffffffff, 0xa2c84000) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:55 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x66a802, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x13}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)={0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88841, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/225}) 00:53:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000000)={0x1}) 00:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffff, 0x400000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="b78463b7cf87856b0f58ba1172ff0b00f8c56957a3e466c64a8f738edd902a556d2d965b25c140c1ad783fae05ad91765d5e060d7d5dc5738fe31b72857b09af2bc04335db829b67d5efca4dbd69c30ef437a59e386bc7787f4fa05f6b555ffb97383b305d8381f5ba00f4db2fd0e44dd9", 0x71}) 00:53:55 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x201, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) 00:53:55 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x204}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:55 executing program 1: socketpair(0xf, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000001c0), 0x4) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20040, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000200)={0x400, 0x2, &(0x7f0000000080)=[0x9, 0xab], &(0x7f0000000100)=[0x400, 0xa62, 0x80000001, 0x3ff, 0x5, 0x6], &(0x7f0000000180)=[0x5, 0x6, 0xffffffff, 0x7f80000, 0x8, 0x400], &(0x7f00000001c0), 0x0, 0x4}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x400448c9, &(0x7f0000000140)) 00:53:55 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x620041, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:55 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x66a802, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x13}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)={0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88841, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/225}) 00:53:55 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000000)={0x0, 0x1}) 00:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffff, 0x20000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:55 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) 00:53:55 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x66a802, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x13}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)={0x0, 0x1}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88841, 0x0) 00:53:55 executing program 1: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x100, 0x2, {}, {0x2, 0x0, 0x8a, 0x2, 0xf9, 0x7, "dfe76318"}, 0x800, 0x4, @offset=0x1, 0x80000000}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:55 executing program 5: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x60}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x3, 0x101}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:55 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x300}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x40) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x133100) 00:53:55 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x66a802, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x13}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88841, 0x0) 00:53:55 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x3f, 0x81, 0x0, 0x1000}, {0x3, 0x65, 0x3, 0x7}, {0x0, 0x4, 0x0, 0x10000000}, {0x7, 0xf1, 0x73}, {0x0, 0x20, 0x3}, {0x1, 0x41, 0x1, 0x6}, {0x7, 0x5, 0x2, 0x4}]}, 0x10) 00:53:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)=0x3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2, 0x101}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:56 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x402}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x200000000000, 0x442140) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xa0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:fsadm_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x80001, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)) 00:53:56 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x66a802, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88841, 0x0) 00:53:56 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0x3, 0xfff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x6, 0x4, 0x0, 0x10001}) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x80) socket$kcm(0x29, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000002c0)={0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000040)={0x2, r4}) ioctl$DRM_IOCTL_RM_CTX(r2, 0x400448c9, &(0x7f0000000140)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) 00:53:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)=0x3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2, 0x101}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:56 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x381080, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x1}, 0x1) 00:53:56 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x406}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x20000) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x2, 0x8, 0x2, 0x6, 0xb, 0x7ff}) 00:53:56 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x66a802, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88841, 0x0) 00:53:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x382, 0x25140) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={r1, 0x7}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 00:53:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)=0x3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2, 0x101}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000000)) 00:53:56 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88841, 0x0) 00:53:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="8154adda0dc20c514ba8951f8b53d58d01040004000000982d00000084baa79fac"], 0x9) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xff, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000040)={0x200, 0x3ff, 0x9, 0x4}) write$6lowpan_enable(r1, 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000140)=""/56, 0x38, 0x40010020, 0x0, 0x27) 00:53:56 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x500}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)=0x3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2, 0x101}) 00:53:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x1}) 00:53:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xff2, 0x11b0a0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:56 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x88841, 0x0) 00:53:56 executing program 3: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x5}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000180)=0x3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) 00:53:56 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x600}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x480001) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x0, @win={{0x4, 0x9, 0x2, 0x10001}, 0x4, 0xfed, &(0x7f0000000080)={{0x80000000, 0x804d, 0x5, 0x8000005}, &(0x7f0000000040)={{0x200, 0x6, 0xfffffff7, 0x5}, &(0x7f0000000000)={{0x20, 0x1def, 0x5b, 0xedb}}}}, 0x1, &(0x7f0000000280)="77a5a75cafe833ca353a", 0x40}}) socket$kcm(0x29, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 00:53:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x2180) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)=0x2) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 00:53:56 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004891}, 0x44000) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x4c01, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x4d7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 00:53:56 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x88841, 0x0) 00:53:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000180)=0x3) 00:53:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x2}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'rwm\x00'}, 0xa) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:56 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x604}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:56 executing program 3: epoll_create(0x6) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000180)={0x0, 0x6b73}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) write$6lowpan_enable(r1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000000)="300e0994ca5268c75d2ef4cb8d0e6c504d97067d3e193192fc3c6cbe6180060ed8a0c427da0c312a9c7ab59ab644a2ec5da3cdd309ad7a9dd19fb0a88e810a861f0e5bdfdcfd5839c1c33c4bb059499d9bed704bfb3724d72c2ad84d3c5741049fcc959c8ae7a9a04f6f69105fbef02bd96c8dbb02ddc5de01264bee25dc71959a640eedfca8cc91c6a9d57b2d2753091e", 0x91, 0x40000, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) 00:53:56 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x88841, 0x0) 00:53:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x3, 0xa}) 00:53:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) syz_io_uring_setup(0xd95, &(0x7f0000000000)={0x0, 0xe1af, 0x2, 0x3, 0x302, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 00:53:56 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x8}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x569002, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 00:53:56 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) 00:53:56 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x700}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) 00:53:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x10000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x100000001, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0xffffffffffffffe0, r2}) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffa, 0x2800) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x10000}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000280)={0x14}) 00:53:56 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) 00:53:56 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x900}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x2, 0x4}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:56 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x801, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x3c0efc4c, 0x6}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), 0x4) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0x4c01, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8000000130020002bbd7000fcdbdf2561656769733132386c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000400000000000000000000080001000900000008000154fd686f080a3ab6ce58dba892"], 0xf8}}, 0x400) io_uring_setup(0x6b09, &(0x7f0000000300)={0x0, 0xe061, 0x2, 0x1, 0x80, 0x0, r3}) 00:53:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) 00:53:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x5294f6, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={r3, 0x80000000}) 00:53:56 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) 00:53:56 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xa00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:56 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x3) 00:53:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) syz_io_uring_setup(0xd95, &(0x7f0000000000)={0x0, 0xe1af, 0x2, 0x3, 0x302, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 00:53:57 executing program 2: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x40) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x682001, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x200, 0x8, &(0x7f0000000000)=[0xfff, 0x8, 0xffffffff, 0x6, 0x90, 0x8, 0x1, 0x101], &(0x7f0000000040)=[0x0, 0x8001], &(0x7f0000000080), &(0x7f0000000100)=[0xfffffc01, 0x800, 0x6, 0x4ac6, 0x0], 0x0, 0x6}) 00:53:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x401c800) 00:53:57 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x8, 0x3) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x3) 00:53:57 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xb00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0x8) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:57 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40c02, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x830602, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0x4c01, 0x0) 00:53:57 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x40) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x3) 00:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x9, 0x189000) bind$packet(r1, &(0x7f0000000380)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:53:57 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x40) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x151040) 00:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x11, 0xffffffffffffffff, 0x5) 00:53:57 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x42c0, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x101201, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0xc0001) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, &(0x7f0000000080)={0x0, 0x7, 0x0}) syz_io_uring_setup(0x274f, &(0x7f0000000180)={0x0, 0xcd90, 0x20, 0x1, 0xd3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0xc4d, &(0x7f0000000240)={0x0, 0xdb5e, 0x10, 0x0, 0x1c4, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000380)={0xfff}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:53:57 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xc00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:57 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x40) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x3) 00:53:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x3ff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0xff, r3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x97, 0x9, 0x6, 0x5, 0x1, 0x5}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:57 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x40) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xd00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x3) 00:53:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xba2a, 0x80300) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x100000000}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:53:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="5124344af0dc0f96553a9f3a4d4a4452816c6a13561fc60cdddfe030e6592c585c474ab4eef7cb48d3a4847f", 0x2c, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r2, 0x80000}) 00:53:57 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000080)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032cbd7000fbdbdf250600000014ab34e0a9819db5b4e0d7339ddebf75000300000000000000000000ffffac1414aa050001000000000070afd55466c593c114be516f227c3a6e272ad498cf11c584240238f789a7d5789d0b3af3f16bd3bc41ffe19e7ee80feb799d793ba233a274eea0e31d66beb02976b80430cf5147d2f352416018b077d11c76bb6c7f0e9b97c38803b37f751ab0c8cad22b757bd3ed438f21045c393908c8d71d9123cf26cef939d9c8382db6290f0785b6320710ca86a2d8997df2dc5575bf943540dcd07c184298043e"], 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000000)={0x7}) ioctl$DRM_IOCTL_RM_CTX(r2, 0x8913, &(0x7f0000000140)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000280)=""/120, &(0x7f0000000040)=0x78) 00:53:57 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x40) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x3) 00:53:57 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xe00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x3, 0xa}) 00:53:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x3, 0x80000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x10000}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x1, 0x0, 0x1}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x82, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x401) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x0, r2}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000000c0)={0xffffffff7fffffff, r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x40f44a086137857}) 00:53:57 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x40) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 2: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x3) 00:53:57 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x1100}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x382, 0x25140) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={r1, 0x7}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 00:53:57 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x40) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 3: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xb, 0x8000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:57 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) 00:53:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) 00:53:57 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x1200}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:57 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x40) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x41) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:57 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) 00:53:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x42002) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:57 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x41) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) munlockall() r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0x8913, &(0x7f0000000040)={r1}) 00:53:57 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) 00:53:58 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x2000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x41) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:58 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) 00:53:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 00:53:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x49, 0xbf, 0x3, 0xfdffffff}) 00:53:58 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x41) 00:53:58 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x2500}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:58 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x402200) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 00:53:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x4, 0x0, 0x8}) 00:53:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 00:53:58 executing program 3: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x41) 00:53:58 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x4100) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0x3}) 00:53:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x401, 0x50b240) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000009, 0x1010, r0, 0xcc7c4000) 00:53:58 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) 00:53:58 executing program 3: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x41) 00:53:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) 00:53:58 executing program 3: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x41) 00:53:58 executing program 1: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0x1, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:58 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x4200}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) 00:53:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6685, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xac, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:53:58 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x41) 00:53:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) 00:53:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x41) 00:53:58 executing program 1: ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:58 executing program 5: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x6000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:58 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000000)) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xe000) 00:53:58 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x41) 00:53:58 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 5: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x4200}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x8a202) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) socketpair(0x1d, 0x80000, 0x9, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000780)={0x0, 0x2000}, 0x4) write$6lowpan_enable(r1, 0x0, 0x0) mmap$fb(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1000000, 0x1010, r1, 0x49000) socket$inet6_udplite(0xa, 0x2, 0x88) 00:53:58 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x9000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 00:53:58 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 00:53:58 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x4, 0x3, 0x4}) 00:53:58 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 00:53:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x1, 0x20}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000100)={0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) munlockall() 00:53:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6a, 0x101200) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:58 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 00:53:58 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x100ff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x100000) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 00:53:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 00:53:58 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) 00:53:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x10000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x9, 0x22000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000000)) 00:53:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 00:53:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x100, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="66baf80cb80ad7c38cef66bafc0c66b84f0066ef26f0fe8100000000c4c1dc5e54082e65360f01c9f30fc7720d26660f73dc00f081af0e0000000c100000d1460966bad10466ed66baf80cb8e204cf89ef66bafc0c66ed", 0x57}], 0x1, 0x8, &(0x7f0000000100)=[@efer={0x2, 0x4000}], 0x1) 00:53:59 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x40000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:59 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) 00:53:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x10000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 00:53:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x10000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:59 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) 00:53:59 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x80000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x600, 0x4, &(0x7f0000000000)=[0x7fffffff, 0xdc5, 0x0, 0xd85], &(0x7f0000000040)=[0x8], &(0x7f0000000080)=[0x3, 0x14b, 0x2, 0x3], &(0x7f0000000100)=[0x7, 0x57b51eec], 0x0, 0x8}) 00:53:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x10000) 00:53:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x4}) 00:53:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x5, 0x4}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@llc, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/203, 0xcb}], 0x1, &(0x7f0000000280)=""/181, 0xb5}, 0x40) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:53:59 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 00:53:59 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x10000) 00:53:59 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:53:59 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x10000) 00:53:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={r1}) 00:53:59 executing program 5: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:53:59 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x400000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x0, 0x4}) 00:53:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x381080) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x2201, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) accept$unix(r1, &(0x7f0000000040), &(0x7f0000000100)=0x6e) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x800) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000000)={0x0, 0x1000}) 00:53:59 executing program 5: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:53:59 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)) 00:53:59 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x10000) 00:53:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x0, 0x4}) 00:53:59 executing program 5: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:53:59 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x10000) 00:53:59 executing program 1: r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x9, &(0x7f00000000c0)={[0x8]}, 0x8) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xb, 0x7fffffff, 0x5, 0x80000}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x10, 0xffffffffffffffff, 0x8000000) sendmsg$nl_crypto(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28010000100001002abd7000fedbdf25647262675f6e6f70725f6374725f61657331323800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000020000000000000000000000800010000000000080001000000000008000100ffff000008000100ff01000008000100000000800800010000e00000080001000000000008000100030000000800010000000008"], 0x128}, 0x1, 0x0, 0x0, 0x4800}, 0x4c010) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x7f, 0x0, 0x10001}) 00:53:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000300)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, [], 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8010) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x4, 0x0, 0x101}) 00:53:59 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x600000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:59 executing program 5: socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:53:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x0, 0x4}) 00:53:59 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x80ffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/53, &(0x7f0000000080)=0x35) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:53:59 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x10000) 00:53:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={r2, 0x80000, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8001, 0x40) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000300)="f2dd75dbffec7b5dad0aab8b303e1e73499050603ed3347940057e9ee2565ca57582e668f4b8901c107b09710954ec2df8b0930ff20d02018dfb5972b849fe5fbfd8f48d84f499b6038123123da67fceaba6abda37c5decd0495dad9318f22d1545a4bbc113ab07c0229dd972793cc310b615e489589ef80f0d5603f45fe849e7f1bfc5c415d98", 0x87, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000001740)={0x2}) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000180)=""/194) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000001700)={&(0x7f0000000440)=@ax25={{0x3, @null}, [@remote, @bcast, @null, @netrom, @remote, @null, @bcast, @bcast]}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/84, 0x54}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f00000005c0)=""/186, 0xba}, {&(0x7f0000000680)=""/36, 0x24}], 0x4, &(0x7f0000000700)=""/4096, 0x1000}, 0x2040) 00:53:59 executing program 5: socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:53:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x3}) 00:53:59 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xb0ff20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:59 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x10000) 00:53:59 executing program 5: socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:53:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1e, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @pix_mp={0xc6, 0x0, 0x4745504d, 0x5, 0x6, [{0x401, 0x8}, {0x7, 0x1}, {0x20, 0x7}, {0x8001, 0x1d47}, {0xc30b, 0x7}, {0x6, 0x74de}, {0x2, 0xef}, {0x8, 0x5}], 0x0, 0x23, 0x0, 0x1, 0x1}}) 00:53:59 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x10000) 00:53:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={r1, 0x1}) 00:53:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x100, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="66baf80cb80ad7c38cef66bafc0c66b84f0066ef26f0fe8100000000c4c1dc5e54082e65360f01c9f30fc7720d26660f73dc00f081af0e0000000c100000d1460966bad10466ed66baf80cb8e204cf89ef66bafc0c66ed", 0x57}], 0x1, 0x8, &(0x7f0000000100)=[@efer={0x2, 0x4000}], 0x1) 00:53:59 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 00:53:59 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xc0ff20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:53:59 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x10000) 00:53:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x109982) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000040)=""/72, &(0x7f0000000100)=0x48) 00:53:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x100000) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 00:54:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x9, 0x2, 0x4, 0x0, 0x1}) 00:54:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x100, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="66baf80cb80ad7c38cef66bafc0c66b84f0066ef26f0fe8100000000c4c1dc5e54082e65360f01c9f30fc7720d26660f73dc00f081af0e0000000c100000d1460966bad10466ed66baf80cb8e204cf89ef66bafc0c66ed", 0x57}], 0x1, 0x8, &(0x7f0000000100)=[@efer={0x2, 0x4000}], 0x1) 00:54:00 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xc0ffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:00 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x10000) 00:54:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x9f299ccd03a135d1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) syz_io_uring_setup(0x391c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3d8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_setup(0x1edb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x30f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) syz_io_uring_setup(0x391c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3d8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_setup(0x1edb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x30f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000001180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3ff) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:54:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x100000) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 00:54:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={0x0, 0x2}) 00:54:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x210001, 0x0) clock_getres(0x7, &(0x7f0000000080)) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x1, 0x100}) 00:54:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 00:54:00 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xd0ff20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x100000) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 00:54:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:54:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 00:54:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x100000) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 00:54:00 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x1000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x101000) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) socket$isdn(0x22, 0x3, 0x23) 00:54:00 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000000)={0x1, 0x3}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) 00:54:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x100000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:00 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x402502, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000000)) 00:54:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x9, 0x2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) socket$unix(0x1, 0x1, 0x0) 00:54:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 00:54:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x401, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0x7, r2}) 00:54:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:00 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x2000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x1ff, 0x0, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x81, 0x8001, 0x2, 0x7ff, 0xfffffbff, 0x10001, 0xfffffff8}) 00:54:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)) 00:54:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1b, 0xc040) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x3, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x1, 0x3, 0x0, 0x7, 0x8, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x6, 0x3, 0x4, 0x2, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x69}], &(0x7f0000000140)='syzkaller\x00', 0xc58, 0x0, 0x0, 0x40f00, 0x18, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xd, 0x5, 0x1}, 0x10, 0xb6f}, 0x78) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x8142, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000100)={0x0, 0x3}) prctl$PR_CAPBSET_READ(0x17, 0x17) 00:54:00 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x2040000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x401, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0x7, r2}) 00:54:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000040)={0xe5f1, 0x1f, 0x4, 0x383680dd, 0x101, 0x9, 0x10003}) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x9, 0x0, 0xa5, 0x0, 0x30f6, 0xffffffc0, 0x100}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x0, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)=0xffff) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000080)={0x40000000}) 00:54:00 executing program 3: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x10000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x6a573e013bd7ed30, 0x1, 0x1, 0x4000}) 00:54:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x401, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0x7, r2}) 00:54:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x20, 0x4, 0xc, 0x10000, 0x0, 0xa}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0xfffffffffffffffc, 0x3, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x2}) 00:54:00 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x3000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000040)=@ax25={{}, [@default, @bcast, @default, @remote, @netrom, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000300)=""/172, 0xac}], 0x3, &(0x7f00000003c0)=""/145, 0x91}, 0x40002002) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x7, 0x7fffffff, 0x2, 0xdededede}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:54:00 executing program 1: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x40010, 0xffffffffffffffff, 0xd3252000) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x200, 0x50d040) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvme-fabrics\x00', 0x501a00, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000080) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x801) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000100)={0x0}) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x10010, r3, 0xffffffff) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={r5}) 00:54:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x401, 0x0, 0x10001}) 00:54:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000000)={0x0, 0x2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x3, 0x6, 0xfff, 0x7ff, 0x7, 0x2}) 00:54:00 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x208c00, 0x0) sendto$unix(r0, &(0x7f0000000180)="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", 0x1000, 0x4000890, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/128, 0x80, 0x2, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x8913, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001180)={0xfff, 0x3ff, 0x7f}) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f00000000c0)={0xab99, 0x401, 0x4, 0xfde8}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/nvme-fabrics\x00', 0x82000, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000001200)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000}) 00:54:00 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x4000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x3, 0x6, 0xfff, 0x7ff, 0x7, 0x2}) 00:54:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfff, 0x505c1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x800, 0x0) io_uring_setup(0x525, &(0x7f00000000c0)={0x0, 0x4ec1, 0x4, 0x1, 0x307, 0x0, r1}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000180)={0x20}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:54:01 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200, 0x0) connect$packet(r0, &(0x7f0000000040)={0x11, 0x17, 0x0, 0x1, 0x5, 0x6, @dev={[], 0x37}}, 0x14) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x400448c9, &(0x7f0000000140)) 00:54:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x5000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0xd61, 0x3, 0x12}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:54:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x3, 0x6, 0xfff, 0x7ff, 0x7, 0x2}) 00:54:01 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:01 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x200, 0x100, 0x800}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x501, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x1, 0x8e5}) 00:54:01 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x6000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:01 executing program 1: syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80400) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:01 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:01 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)) 00:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x20, 0x101000) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0xb, 0x2, 0x8, 0x6, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xf}, @exit, @exit, @map={0x18, 0x1, 0x1, 0x0, r1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0xa, 0x0, 0x5, 0x50, 0xffffffffffffffea}]}, &(0x7f0000000080)='syzkaller\x00', 0xffff, 0x39, &(0x7f0000000100)=""/57, 0x40f00, 0x3f16f22f829a80fb, [], r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x10001, 0x7fffffff}, 0x10}, 0x78) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:54:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) 00:54:01 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x6040000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:01 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000380)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/159, 0x9f, 0x0, 0x21}, @flat=@binder={0x73622a85, 0x1, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @enter_looper, @acquire={0x40046305, 0x2}, @enter_looper], 0x61, 0x0, &(0x7f00000002c0)="d313da6871df5e6484040b4b397d888fcd643110632efad64d7faa3169fb4db986f27906232377112e47d8b5819898a525a6391e824b9b52bac8a62dd0b685af9d1131eda8a09bf9733e15abdf44dbb984e35aa2af70b5d4ae34b60a3cbd43d994"}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={r3}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x101002, 0x0) r5 = epoll_create(0x100) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="852a6466000000008e16c43e233e594565f3e070605294773dcb7954234c5e0ed1581c3f9d92b0fef41b89", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r5, @ANYBLOB="000000000b2da9ce3d661de8ce691960df8e0000040000c200008561b27cb817d3958fc59273ab4ea080307ee6a8ad73c36c3ff20000000002000000000039c2bb0e"], &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/13, 0xd, 0x2, 0x24}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x0, 0x0, &(0x7f0000000700)}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000400)={0x200, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000440)={r6, 0x6}) 00:54:01 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x2}) 00:54:01 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x7000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) 00:54:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:01 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/147}) restart_syscall() mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/19) socket$inet6_udplite(0xa, 0x2, 0x88) 00:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xa4200, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x100, 0x100, 0x45e6, 0x1f1, 0x4, 0x3}) 00:54:01 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x8000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:01 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:01 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/147}) restart_syscall() mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/19) socket$inet6_udplite(0xa, 0x2, 0x88) 00:54:01 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0x7}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000000)={0x0, 0x2}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/176) 00:54:01 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x282000) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dd91a79f023033c9060620"], 0x2c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 00:54:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:01 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x9000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/147}) restart_syscall() mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/19) socket$inet6_udplite(0xa, 0x2, 0x88) 00:54:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:01 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:01 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/147}) restart_syscall() mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/19) socket$inet6_udplite(0xa, 0x2, 0x88) 00:54:01 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x7000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:01 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xa000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7fffffff}) 00:54:01 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000, 0x2b3}) 00:54:01 executing program 3: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/147}) restart_syscall() mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/19) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)={0x3, 0x0, 0x4, 0x20, 0x1f, {0x77359400}, {0x4, 0x2, 0x40, 0xac, 0x2, 0x8, "ca363de9"}, 0x8, 0x0, @offset=0xd26, 0x39e}) io_uring_setup(0x586c, &(0x7f0000000280)={0x0, 0x12ba, 0x10, 0x3, 0x21d, 0x0, r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 00:54:02 executing program 3: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xb000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:02 executing program 3: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/147}) restart_syscall() 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:02 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xc000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:02 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)={0x3, 0x0, 0x4, 0x20, 0x1f, {0x77359400}, {0x4, 0x2, 0x40, 0xac, 0x2, 0x8, "ca363de9"}, 0x8, 0x0, @offset=0xd26, 0x39e}) io_uring_setup(0x586c, &(0x7f0000000280)={0x0, 0x12ba, 0x10, 0x3, 0x21d, 0x0, r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 00:54:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/147}) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:02 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xd000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4200) 00:54:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)={0x3, 0x0, 0x4, 0x20, 0x1f, {0x77359400}, {0x4, 0x2, 0x40, 0xac, 0x2, 0x8, "ca363de9"}, 0x8, 0x0, @offset=0xd26, 0x39e}) io_uring_setup(0x586c, &(0x7f0000000280)={0x0, 0x12ba, 0x10, 0x3, 0x21d, 0x0, r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 00:54:02 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3000000, 0x2b3}) 00:54:02 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xe000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:02 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)={0x3, 0x0, 0x4, 0x20, 0x1f, {0x77359400}, {0x4, 0x2, 0x40, 0xac, 0x2, 0x8, "ca363de9"}, 0x8, 0x0, @offset=0xd26, 0x39e}) io_uring_setup(0x586c, &(0x7f0000000280)={0x0, 0x12ba, 0x10, 0x3, 0x21d, 0x0, r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:54:02 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3000000, 0x2b3}) 00:54:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 00:54:02 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x10000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3000000, 0x2b3}) 00:54:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)={0x3, 0x0, 0x4, 0x20, 0x1f, {0x77359400}, {0x4, 0x2, 0x40, 0xac, 0x2, 0x8, "ca363de9"}, 0x8, 0x0, @offset=0xd26, 0x39e}) io_uring_setup(0x586c, &(0x7f0000000280)={0x0, 0x12ba, 0x10, 0x3, 0x21d, 0x0, r2}) 00:54:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x0, 0x2b3}) 00:54:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 00:54:02 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x11000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)={0x3, 0x0, 0x4, 0x20, 0x1f, {0x77359400}, {0x4, 0x2, 0x40, 0xac, 0x2, 0x8, "ca363de9"}, 0x8, 0x0, @offset=0xd26, 0x39e}) io_uring_setup(0x586c, &(0x7f0000000280)={0x0, 0x12ba, 0x10, 0x3, 0x21d, 0x0, r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:54:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x0, 0x2b3}) 00:54:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000380)={0x3, 0x0, 0x4, 0x20, 0x1f, {0x77359400}, {0x4, 0x2, 0x40, 0xac, 0x2, 0x8, "ca363de9"}, 0x8, 0x0, @offset=0xd26, 0x39e}) 00:54:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)={0x3, 0x0, 0x4, 0x20, 0x1f, {0x77359400}, {0x4, 0x2, 0x40, 0xac, 0x2, 0x8, "ca363de9"}, 0x8, 0x0, @offset=0xd26, 0x39e}) io_uring_setup(0x586c, &(0x7f0000000280)={0x0, 0x12ba, 0x10, 0x3, 0x21d, 0x0, r2}) 00:54:02 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x12000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x0, 0x2b3}) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) 00:54:03 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x400}) 00:54:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000}) 00:54:03 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x20000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) 00:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400}) 00:54:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}) 00:54:03 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x20ffb000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000}) 00:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f55, 0x3000000}) 00:54:03 executing program 1: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x20ffc000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x43100) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x20ffd000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) 00:54:03 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x43100) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x43100) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x25000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x20ffc000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x43100) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x40000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x43100) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x400}) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3}) 00:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x43100) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x42000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x40000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) 00:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000300)={0x400, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:03 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x90000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 1: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:54:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:04 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xfeffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 2: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 1: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:54:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 2: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 1: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) 00:54:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)) 00:54:04 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xff000100}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:04 executing program 2: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) r1 = syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x38d2, &(0x7f0000000500)={0x0, 0x34b5, 0x4, 0x3, 0x248, 0x0, r1}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x43100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0xf31e, 0x2, 0x1fe, 0x2, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/76}) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/147}) restart_syscall() 00:54:04 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, 0x0) 00:54:04 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4002) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7fff, 0x400042) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x3}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x0, 0x1}) 00:54:04 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xffff8000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:04 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) syz_io_uring_setup(0x2604, &(0x7f0000000200)={0x0, 0xc97d, 0x1, 0x2, 0x184}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, 0x0) 00:54:04 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4002) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7fff, 0x400042) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x3}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x0, 0x1}) 00:54:04 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x500, 0x4, &(0x7f0000000000)=[0x80000000, 0x8, 0x9, 0x801], &(0x7f0000000040), &(0x7f00000001c0)=[0x8, 0x1, 0x418c, 0xfffffff8, 0x3, 0x9, 0xfffffff8, 0x6, 0x8], &(0x7f0000000100)=[0x9, 0x8000, 0x2, 0x6, 0x200], 0x0, 0x8}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xffffc000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:04 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, 0x0) 00:54:04 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4002) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7fff, 0x400042) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x3}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x0, 0x1}) 00:54:04 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 1: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f00000000c0)=0x7, 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x694a00) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x279, 0x710, 0x7fffffff, 0x4, 0x8, 0x400}) 00:54:04 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4002) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7fff, 0x400042) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x3}) 00:54:04 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xfffffffe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:04 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4002) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7fff, 0x400042) 00:54:04 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4002) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7fff, 0x400042) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x3}) 00:54:04 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 00:54:04 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:04 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 1: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0xffffc000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:04 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4002) ioctl$DRM_IOCTL_RM_CTX(r1, 0x6364, 0x0) 00:54:04 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 00:54:04 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:04 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4002) 00:54:04 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="660f38db807f5b0f01c3f20f2abb9333ba400066ed0f01d166b9800000c00f326635000100000f30eaeb1315009a00002901d9aa00803e0f5fe2", 0x3a}], 0x1, 0x9, &(0x7f00000001c0), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0x400448c9, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0x4, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000040)={0x0, r4}) 00:54:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 00:54:05 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:05 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7fffffff}) 00:54:05 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) 00:54:05 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) 00:54:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:05 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x500, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) socketpair(0x6, 0x4, 0x9, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x7, 0x0) accept4(r1, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x800) 00:54:05 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) 00:54:05 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x4c) 00:54:05 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) 00:54:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:05 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x500, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) socketpair(0x6, 0x4, 0x9, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x7, 0x0) accept4(r1, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x800) 00:54:05 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:05 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:05 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x4c) 00:54:05 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x500, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) socketpair(0x6, 0x4, 0x9, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x7, 0x0) accept4(r1, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x800) 00:54:05 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:05 executing program 2: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)) 00:54:05 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:05 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x4c) 00:54:05 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x500, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) socketpair(0x6, 0x4, 0x9, &(0x7f0000000040)) socket$kcm(0x29, 0x7, 0x0) 00:54:05 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0x5) 00:54:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)) 00:54:05 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 00:54:05 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) 00:54:05 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x500, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) socketpair(0x6, 0x4, 0x9, &(0x7f0000000040)) 00:54:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)) 00:54:05 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x230800, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000006, 0x50, r2, 0x39971000) 00:54:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 00:54:05 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) 00:54:05 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x500, 0x0) socketpair(0x6, 0x4, 0x9, &(0x7f0000000040)) 00:54:05 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x230800, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000006, 0x50, r2, 0x39971000) 00:54:05 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 00:54:05 executing program 5: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) 00:54:05 executing program 1: socketpair(0x6, 0x4, 0x9, &(0x7f0000000040)) 00:54:05 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) 00:54:05 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0xec2c, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:54:06 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x1, 0xa1, 0xea000000, 0xb0b0b0b0}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0x8913, &(0x7f0000000140)) 00:54:06 executing program 5: r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) 00:54:06 executing program 1: socketpair(0x0, 0x4, 0x9, &(0x7f0000000040)) 00:54:06 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 5: r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) 00:54:06 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0xec2c, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:54:06 executing program 5: r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x4c) 00:54:06 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x4, 0x0, 0x7}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0xfc, &(0x7f0000000280)=""/252, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x2}) 00:54:06 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 1: socketpair(0x0, 0x4, 0x9, &(0x7f0000000040)) 00:54:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0xec2c, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:54:06 executing program 5: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x4c) 00:54:06 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xa}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x10001) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0xfffffffffffffe23) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="069db1205b0cd66fe0720adb89810b032b428acd6a4fab870d7218b69706be42695a9ab3539f411b6b58a5e7e522fec13ad7210eb3392668a656992c8a5fd880afcb7941e6e634de057f49e3f30ad168947a74cf622d759a1abf874040a18d81551bd477ef2084148bc599e889547a12722991d280100aa7ce4dedbcaab535477a702c5f313ebc1009ba419389bf0a95701e20210c77acea5b5c3cdc51a32c7c32ddde4ec21fcec1825763c5fd2e202f92ca3f97305d0d2df9a1208daf6144685d396dbea8b318752a83fbfd34e123e880183474d58701daf89f8d33e36b0af53a1778647cf75634", 0xe8}) 00:54:06 executing program 1: socketpair(0x0, 0x4, 0x9, &(0x7f0000000040)) 00:54:06 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c74424000171c448c74424029e7e0980c7442406000000000f01142448b852de0000000000000f23d00f21f835100000050f23f80f7f0c85b96b000046dbe266baf80cb87ee04785ef66bafc0cec66f3f2654475e8c421fbe6255f68b89af3f30f23d8430f01dfc744240067000000c74424021479ffffff2c24", 0x7a}], 0x1, 0x32, &(0x7f0000000240)=[@dstype3={0x7, 0xe}, @cstype0={0x4, 0xd}], 0x2) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000002c0)=0x3) 00:54:06 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xb}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 5: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x4c) 00:54:06 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0xec2c, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:06 executing program 1: socketpair(0x6, 0x0, 0x9, &(0x7f0000000040)) 00:54:06 executing program 4: syz_io_uring_setup(0x39ab, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 5: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x4c) 00:54:06 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0xec2c, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:06 executing program 1: socketpair(0x6, 0x0, 0x0, &(0x7f0000000040)) 00:54:06 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c74424000171c448c74424029e7e0980c7442406000000000f01142448b852de0000000000000f23d00f21f835100000050f23f80f7f0c85b96b000046dbe266baf80cb87ee04785ef66bafc0cec66f3f2654475e8c421fbe6255f68b89af3f30f23d8430f01dfc744240067000000c74424021479ffffff2c24", 0x7a}], 0x1, 0x32, &(0x7f0000000240)=[@dstype3={0x7, 0xe}, @cstype0={0x4, 0xd}], 0x2) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000002c0)=0x3) 00:54:06 executing program 4: syz_io_uring_setup(0x39ab, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dd91a79f023033c9060620"], 0x2c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfe}, 0xfffffffffffffe17}, 0x1, 0x0, 0x0, 0x40104}, 0x20040804) 00:54:06 executing program 1: socketpair(0x6, 0x0, 0x0, 0x0) 00:54:06 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xec2c, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:06 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 4: syz_io_uring_setup(0x39ab, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c74424000171c448c74424029e7e0980c7442406000000000f01142448b852de0000000000000f23d00f21f835100000050f23f80f7f0c85b96b000046dbe266baf80cb87ee04785ef66bafc0cec66f3f2654475e8c421fbe6255f68b89af3f30f23d8430f01dfc744240067000000c74424021479ffffff2c24", 0x7a}], 0x1, 0x32, &(0x7f0000000240)=[@dstype3={0x7, 0xe}, @cstype0={0x4, 0xd}], 0x2) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000002c0)=0x3) 00:54:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:54:07 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xec2c, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:07 executing program 1: socketpair(0x6, 0x0, 0x0, 0x0) 00:54:07 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x8913, &(0x7f0000000140)={0x0, 0xb000000}) 00:54:07 executing program 1: socketpair(0x6, 0x0, 0x0, 0x0) 00:54:07 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xec2c, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c74424000171c448c74424029e7e0980c7442406000000000f01142448b852de0000000000000f23d00f21f835100000050f23f80f7f0c85b96b000046dbe266baf80cb87ee04785ef66bafc0cec66f3f2654475e8c421fbe6255f68b89af3f30f23d8430f01dfc744240067000000c74424021479ffffff2c24", 0x7a}], 0x1, 0x32, &(0x7f0000000240)=[@dstype3={0x7, 0xe}, @cstype0={0x4, 0xd}], 0x2) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r1}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x101040, 0x0) 00:54:07 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 2: syz_io_uring_setup(0x5b1a, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/238}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={0x0, 0x400}) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) 00:54:07 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x11}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 5: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x8000, 0x3, 0x4, 0x8, 0x8b, {0x77359400}, {0x4, 0x2, 0x3, 0xe0, 0x81, 0xff, "a422e4cf"}, 0x4, 0x1, @offset=0x2, 0xfffffffd}) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) 00:54:07 executing program 2: syz_io_uring_setup(0x5b1a, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x2000000}) 00:54:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c74424000171c448c74424029e7e0980c7442406000000000f01142448b852de0000000000000f23d00f21f835100000050f23f80f7f0c85b96b000046dbe266baf80cb87ee04785ef66bafc0cec66f3f2654475e8c421fbe6255f68b89af3f30f23d8430f01dfc744240067000000c74424021479ffffff2c24", 0x7a}], 0x1, 0x32, &(0x7f0000000240)=[@dstype3={0x7, 0xe}, @cstype0={0x4, 0xd}], 0x2) ioctl$DRM_IOCTL_RM_CTX(r0, 0x4c01, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r1}) 00:54:07 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)={'a', ' *:* ', 'rwm\x00'}, 0xa) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x40800) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="7411ab", 0x3) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x100, 0x480cc0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000100)=0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000040)=0x100000) 00:54:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) 00:54:07 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x12}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) 00:54:07 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c74424000171c448c74424029e7e0980c7442406000000000f01142448b852de0000000000000f23d00f21f835100000050f23f80f7f0c85b96b000046dbe266baf80cb87ee04785ef66bafc0cec66f3f2654475e8c421fbe6255f68b89af3f30f23d8430f01dfc744240067000000c74424021479ffffff2c24", 0x7a}], 0x1, 0x32, &(0x7f0000000240)=[@dstype3={0x7, 0xe}, @cstype0={0x4, 0xd}], 0x2) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r0}) 00:54:07 executing program 2: syz_io_uring_setup(0x5b1a, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:07 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r0}) 00:54:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) 00:54:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) 00:54:07 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:07 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:07 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x25}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) 00:54:07 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r0}) 00:54:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) 00:54:07 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:07 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) 00:54:07 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:07 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) 00:54:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:07 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002840)='/dev/nvme-fabrics\x00', 0x60a000, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r0}) 00:54:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) 00:54:07 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:07 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x60}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) 00:54:07 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3, 0x1, 0x2}) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r0}) 00:54:07 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:07 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x90}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:07 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) 00:54:08 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:08 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c, 0x0, r0}) 00:54:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x204}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:08 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x5, "8064b9c1ed75663246f84da64155dcf8e2e95a4efde9e88f9141f3ebf975699764147533f8f615e4d925decc5f4f80"}, 0x37, 0x4000001, 0x0, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c}) 00:54:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:54:08 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) 00:54:08 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:08 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x300}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c}) 00:54:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:54:08 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x402}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:08 executing program 4: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:08 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:08 executing program 3: io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c}) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x406}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:08 executing program 3: io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c}) 00:54:08 executing program 4: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x500}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:08 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:08 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) 00:54:08 executing program 3: io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c}) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x600}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 4: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x254}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:54:08 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) 00:54:08 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:08 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100)) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x604}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 3: io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xb090, 0x10, 0x3, 0x20c}) 00:54:08 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x700}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:08 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:08 executing program 3: io_uring_setup(0x85cdf, 0x0) 00:54:08 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100)) 00:54:08 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x900}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff}) 00:54:08 executing program 3: io_uring_setup(0x85cdf, 0x0) 00:54:08 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100)) 00:54:08 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:08 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xa00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:09 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 00:54:09 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 3: io_uring_setup(0x85cdf, 0x0) 00:54:09 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:09 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xb00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 3: io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x3, 0x20c}) 00:54:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 00:54:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:09 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xc00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:54:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:09 executing program 3: io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x20c}) 00:54:09 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xd00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 00:54:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x3ff, 0x1ff}) 00:54:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:09 executing program 3: io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x20c}) 00:54:09 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0xe00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 4: syz_io_uring_setup(0x39ab, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 2: syz_io_uring_setup(0x5b1a, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 00:54:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:54:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x3ff, 0x1ff}) 00:54:09 executing program 3: io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x20c}) 00:54:09 executing program 4: syz_io_uring_setup(0x39ab, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x1100}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) 00:54:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x3ff, 0x1ff}) 00:54:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:54:09 executing program 3: io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x20c}) 00:54:09 executing program 4: syz_io_uring_setup(0x39ab, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) 00:54:09 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x1200}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:54:09 executing program 3: io_uring_setup(0x85cdf, &(0x7f0000000100)={0x0, 0x0, 0x10}) 00:54:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x1ff}) 00:54:09 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40140, 0x0) 00:54:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x1ff}) 00:54:09 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x2000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 3: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:09 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:09 executing program 3: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:09 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x2500}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x1ff}) 00:54:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:54:09 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:09 executing program 3: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:09 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff}) 00:54:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:10 executing program 3: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:10 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x4200}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:54:10 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:10 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x6000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff}) 00:54:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:10 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x9000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0x6364, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:54:10 executing program 4: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000180)) 00:54:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff}) 00:54:10 executing program 0: syz_io_uring_setup(0x39ab, &(0x7f0000000100)={0x0, 0x0, 0x100ff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:54:10 executing program 5: syz_io_uring_setup(0x39ab, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 00:54:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) [ 945.943273][T28378] ==================================================================