: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x800, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x200, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c12cf97bb5321608cc2f31a3b08419f50db954489a772debbb64a25c133e1c1f1632201403abc5a40d2226c424a8f84b64f3d15c1560ce2dfd78280434b6a0e0f0317939706a51e9786ca98dbb94bfce06bcca8bf750c675eb72a77a0ba309a917c94e4d521f4156d3aa2ab24671214ade24e33a3a9457ef727ec9f203f409d3871cb1a94190414f0473582e6ae6acbbf87a6f4e8404a63b810aed778fb9ff58a5747d09d684fea05fba010b73ffeaaa7a49b8591fc0408202684d1bff94ac585bd3a9f4905a8e28b873e506e3f4089c60852cf494ae73239ed08f309c656de6787c6804e16a5b117c923a07d520819580ca1604669da1698d6360a034c9fe4e47e236fd850e2fd1cc39a11c2af445743ee88f5719891dcd5ac26ea578ddd1c0502d19cbb4a3025368844c6c7827a2f652239f87e84278c3de5d43f37ad2df0a0dc12eff9eeedf5acd9430ef77a736df6210834d0b4b4d75a146f633ad708307034032706264648709163bde1d379bd6c46966461faaea42f91d0c904f9b49188", 0x200, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x8f04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:03:33 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:33 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x200, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x8f05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:33 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:33 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x8f06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:33 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:34 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x8f07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:34 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c12cf97bb5321608cc2f31a3b08419f50db954489a772debbb64a25c133e1c1f1632201403abc5a40d2226c424a8f84b64f3d15c1560ce2dfd78280434b6a0e0f0317939706a51e9786ca98dbb94bfce06bcca8bf750c675eb72a77a0ba309a917c94e4d521f4156d3aa2ab24671214ade24e33a3a9457ef727ec9f203f409d3871cb1a94190414f0473582e6ae6acbbf87a6f4e8404a63b810aed778fb9ff58a5747d09d684fea05fba010b73ffeaaa7a49b8591fc0408202684d1bff94ac585bd3a9f4905a8e28b873e506e3f4089c60852cf494ae73239ed08f309c656de6787c6804e16a5b117c923a07d520819580ca1604669da1698d6360a034c9fe4e47e236fd850e2fd1cc39a11c2af445743ee88f5719891dcd5ac26ea578ddd1c0502d19cbb4a3025368844c6c7827a2f652239f87e84278c3de5d43f37ad2df0a0dc12eff9eeedf5acd9430ef77a736df6210834d0b4b4d75a146f633ad708307034032706264648709163bde1d379bd6c46966461faaea42f91d0c904f9b49188f0e26753f9dcb4dc3d626af1a6238dd1406ce784c7e29b2346657ccc41b56f1937f70a297c7a735b9b504a7ad6a6ce317d24dfad7ff6b308028122b73f91e9de25f88ef74c7fed81e8cdc30da77fc616f63c80bbca4bd03e998768689252eb9493da221067b1179cb0c054e000b6dc44ac985c07c5e72491c0b0ac6b9aa8fc40bb05182f6c817c454fec2bbf0b7422cf9e3720660d420a8867cf9aea7108bfe8d0356185a08df5eb3efec70ef13b4deb0cca70ca9305b9ef02e2560ccff572b98e492dd0a1c4be0a09bbcc2f248bede4ac781d78bb09967a8877a8e855e37f80c6b9c387f21540994d2faa6b7b76590c05788dcf790401febbb724f0c2956a218e47d69e1e55ee7652fd1314937d6be1c605a4be5fdcbb8c5ebea5b65bb53390e8d404ee2ae67921eddf4136173d95dae6dfb78035e4d82b8612f105aa71374ac562f901a29564edabaea589ca543ecc2d589b373dca77156d87ed034e45b837e210d19abfde3c18741c6d17d25e12733a88c2635bcb6a274a88384f7ff540348b7d35c557afed1f32d067eb694450a1db4097153375a2a2ca20ac2409d1f9e0093e80260ff0ce92c6b73ed92afbcec73aa07fab6dd2c7e2f431088d64cfa2d5b18c18866f451c8313a360a914e84e7e5aef9097abb75c954014be18cf096f6b071c516e5bb8255a149a39572dac276e09bc2b5b19cfeaedc038873849987b5b", 0x400, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x100, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20) 08:03:34 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9000, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:34 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9001, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:34 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x100, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a", 0x40, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:34 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9002, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:35 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x200, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9003, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:35 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 4: sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x200, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9004, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:35 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 4: sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 4: sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f4", 0x20, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9005, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:35 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:35 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9006, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:36 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x100, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9007, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:36 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a", 0x40, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9100, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:36 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086", 0x10, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a", 0x40, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9101, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:36 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:36 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9102, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:37 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c", 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f4", 0x20, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9103, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:37 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f4", 0x20, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9104, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9105, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:37 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:37 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a", 0x40, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9106, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:38 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a", 0x40, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086", 0x10, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9107, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:38 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086", 0x10, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9200, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:38 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0", 0x4, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:38 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f4", 0x20, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9201, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9202, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:39 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f4", 0x20, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9203, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:39 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9204, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:39 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acd", 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9205, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:39 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086", 0x10, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:39 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9206, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:40 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086", 0x10, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9207, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:40 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0", 0x4, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9300, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:40 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0", 0x4, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9301, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:40 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9302, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acd", 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9303, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9304, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:41 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9305, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:41 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:41 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acd", 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0", 0x4, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:42 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9306, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:42 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0", 0x4, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:42 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:42 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9307, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:42 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:42 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9400, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:42 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acd", 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:42 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9401, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:42 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20) 08:03:43 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9402, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acd", 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:43 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9403, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:43 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9404, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:43 executing program 1: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9403, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:43 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9405, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:44 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:44 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9406, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:44 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9407, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:44 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:44 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:44 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:44 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9500, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:44 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:44 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20) 08:03:44 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:44 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9501, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:44 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:45 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:45 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:45 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20) 08:03:45 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9502, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:45 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:45 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:45 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20) 08:03:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:45 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:45 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9503, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:45 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:45 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, 0x0, 0x0) 08:03:45 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20) 08:03:45 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:45 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9504, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:45 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x20) 08:03:45 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:45 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:45 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9505, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:45 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:45 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0", 0x4, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:45 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:46 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9506, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:46 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086", 0x10, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9507, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:46 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:46 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9600, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:46 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)='\n', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20) 08:03:46 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9601, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:46 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c12cf97bb5321608cc2f31a3b08419f50db954489a772debbb64a25c133e1c1f1632201403abc5a40d2226c424a8f84b64f3d15c1560ce2dfd78280434b6a0e0f0317939706a51e9786ca98dbb94bfce06bcca8bf750c675eb72a77a0ba309a917c94e4d521f4156d3aa2ab24671214ade24e33a3a9457ef727ec9f203f409d3871cb1a94190414f0473582e6ae6acbbf87a6f4e8404a63b810aed778fb9ff58a5747d09d684fea05fba010b73ffeaaa7a49b8591fc0408202684d1bff94ac585bd3a9f4905a8e28b873e506e3f4089c60852cf494ae73239ed08f309c656de6787c6804e16a5b117c923a07d520819580ca1604669da1698d6360a034c9fe4e47e236fd850e2fd1cc39a11c2af445743ee88f5719891dcd5ac26ea578ddd1c0502d19cbb4a3025368844c6c7827a2f652239f87e84278c3de5d43f37ad2df0a0dc12eff9eeedf5acd9430ef77a736df6210834d0b4b4d75a146f633ad708307034032706264648709163bde1d379bd6c46966461faaea42f91d0c904f9b49188", 0x200, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:46 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c12cf97bb5321608cc2f31a3b08419f50db954489a772debbb64a25c133e1c1f1632201403abc5a40d2226c424a8f84b64f3d15c1560ce2dfd78280434b6a0e0f0317939706a51e9786ca98dbb94bfce06bcca8bf750c675eb72a77a0ba309a917c94e4d521f4156d3aa2ab24671214ade24e33a3a9457ef727ec9f203f409d3871cb1a94190414f0473582e6ae6acbbf87a6f4e8404a63b810aed778fb9ff58a5747d09d684fea05fba010b73ffeaaa7a49b8591fc0408202684d1bff94ac585bd3a9f4905a8e28b873e506e3f4089c60852cf494ae73239ed08f309c656de6787c6804e16a5b117c923a07d520819580ca1604669da1698d6360a034c9fe4e47e236fd850e2fd1cc39a11c2af445743ee88f5719891dcd5ac26ea578ddd1c0502d19cbb4a3025368844c6c7827a2f652239f87e84278c3de5d43f37ad2df0a0dc12eff9eeedf5acd9430ef77a736df6210834d0b4b4d75a146f633ad708307034032706264648709163bde1d379bd6c46966461faaea42f91d0c904f9b49188f0e26753f9dcb4dc3d626af1a6238dd1406ce784c7e29b2346657ccc41b56f1937f70a297c7a735b9b504a7ad6a6ce317d24dfad7ff6b308028122b73f91e9de25f88ef74c7fed81e8cdc30da77fc616f63c80bbca4bd03e998768689252eb9493da221067b1179cb0c054e000b6dc44ac985c07c5e72491c0b0ac6b9aa8fc40bb05182f6c817c454fec2bbf0b7422cf9e3720660d420a8867cf9aea7108bfe8d0356185a08df5eb3efec70ef13b4deb0cca70ca9305b9ef02e2560ccff572b98e492dd0a1c4be0a09bbcc2f248bede4ac781d78bb09967a8877a8e855e37f80c6b9c387f21540994d2faa6b7b76590c05788dcf790401febbb724f0c2956a218e47d69e1e55ee7652fd1314937d6be1c605a4be5fdcbb8c5ebea5b65bb53390e8d404ee2ae67921eddf4136173d95dae6dfb78035e4d82b8612f105aa71374ac562f901a29564edabaea589ca543ecc2d589b373dca77156d87ed034e45b837e210d19abfde3c18741c6d17d25e12733a88c2635bcb6a274a88384f7ff540348b7d35c557afed1f32d067eb694450a1db4097153375a2a2ca20ac2409d1f9e0093e80260ff0ce92c6b73ed92afbcec73aa07fab6dd2c7e2f431088d64cfa2d5b18c18866f451c8313a360a914e84e7e5aef9097abb75c954014be18cf096f6b071c516e5bb8255a149a39572dac276e09bc2b5b19cfeaedc038873849987b5bdda233d7ff9e3b8a43817ea76bf1fa8d5a87c65bc6aa92d44a9234c141831d47f3b5ff93ab558894cf6db62029c9ac54981ca5b8a201408e905019183f47aecadd0de6ddc77d556a8f43f3c47f67dd7ee12ac3f3b046c4f5bd75b29e3e5bdd2eaf95ab9513f1a6b477d8789426db16f8a4ca94987c5b02827df0e8afcc4178496a45b23fddce27057895020ff64d27bd596b2bb5bb0ab8f0a05488a77c522375996938e39421f78a708d2e53a4cfe7f01d8af94b71df2f67192f20d02b158f62a25cb1e65d846f77a24912094441134e6d0d94dd6d93d6dc33bf0efb5211280a84731efc1927fdab816bd3ca8df1d80ea328825fb165418d2aae84ab60ec94f8a36a41cbe90eba28ec87467873968388264e6cc7dcb98e3e6d9a8e4e9ddeaa88d68857671f84b49c8f16c1594c2f68cac0112eba9c41cf110c77560c04a94a720d5ca497cde39b8ebe3bbc958f9853b4426adc5fe2c97c1021b434b659e9886cc5b8c8e2489fbc17f3d189461ca93ca43454530b71cf7d04731d8fd349596bffcca8b8be7ff57cef61be27ffec621b5e2821c5e724b6faad18699bac802e98ec1f526dcd4a1ff7639e46de52fcba1f51ce35a175ad0b3665115d907c995c06c900ee24b92aadf8a3848646f22e3d88caeb65bf0cb2c7acbaffdb9991ff84759fcca2d3eb8d5bb309ad9baa783fa2b3044b1b895272bbcac7cc2e90dc9b87d2e24c244e924f7ff708446888afa72fb4cf982215af9eb0f1ae5af515ab48156b35143fd4db0cf93ca1e1cd43a236ec5d0577661f031f7c19f5b14e2f9063bc9a6fe7127f8973c29be4ab46cf83b82b17532e38b7be66b8d15bc74573052d0af431567641dcfe1d53bf92a05ca0a75477e3f38c138e8cdb7306a92892cbca3af0305933e7fe60fa644c72293db99df5ae041c71615ac0c0840d407ad766479b2cf96b0fff8c6579208af00c2e1a145eac7917e3461d130f14b5d850e51caedae9cee67acab56753c0ad3d89f1b758af55aa939487a0142c2f76946c351334a686f30f9da49cdbd9cd244f02ea8fdf2642ce0bf7588ef6454b545e364227cb63184d6e83ff1d7369463a54fb8135ac8377ef6c466fbf727ee710376439b3c43792572b490972330d2894f86cfe5aec5c64d843a81d426fe3d67060f0c896b35ff7e2799663392b1c289b618519bd823cca3e97697131eeb44fc69330f230704d23bbbd6f04a1cc21e0bee30dbee79cb0931b7fc23d1e968c5bc05a20eefa7e52dd4e6b4bf333134178021d6b82defa3204b14188ee8440300b70c4c8354263e767bc60c0082f3e5b4e4248fd0f66ff9a4f6f63486ee156e289423e25c288049cca7132dfc68fbccf260886629601c5eb7e1d2339853c85e45833cacd5d3b11c4af21534c530696911c9035bb6c22754f05af14d585c852d586e58eeaae6bbd771362", 0x800, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:46 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9602, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:47 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:47 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:47 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:47 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:47 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="0acdd1d0411d672f6a76d24cecf7f086654510958777d17ee0a8e788ca1c56f42763f976ce2518a12fb715f5b4082783eab9b8fdf634f2278b4b0c00d8af597a918d47d88f2ef5630e6951a12399ad70ce07c89e2dd8bb89cacc5a12450772f7892826f4d82240967dccd6f7efedddc0f40c9c0b89c11aa985dc9e65d95d680c12cf97bb5321608cc2f31a3b08419f50db954489a772debbb64a25c133e1c1f1632201403abc5a40d2226c424a8f84b64f3d15c1560ce2dfd78280434b6a0e0f0317939706a51e9786ca98dbb94bfce06bcca8bf750c675eb72a77a0ba309a917c94e4d521f4156d3aa2ab24671214ade24e33a3a9457ef727ec9f203f409d3871cb1a94190414f0473582e6ae6acbbf87a6f4e8404a63b810aed778fb9ff58a5747d09d684fea05fba010b73ffeaaa7a49b8591fc0408202684d1bff94ac585bd3a9f4905a8e28b873e506e3f4089c60852cf494ae73239ed08f309c656de6787c6804e16a5b117c923a07d520819580ca1604669da1698d6360a034c9fe4e47e236fd850e2fd1cc39a11c2af445743ee88f5719891dcd5ac26ea578ddd1c0502d19cbb4a3025368844c6c7827a2f652239f87e84278c3de5d43f37ad2df0a0dc12eff9eeedf5acd9430ef77a736df6210834d0b4b4d75a146f633ad708307034032706264648709163bde1d379bd6c46966461faaea42f91d0c904f9b49188f0e26753f9dcb4dc3d626af1a6238dd1406ce784c7e29b2346657ccc41b56f1937f70a297c7a735b9b504a7ad6a6ce317d24dfad7ff6b308028122b73f91e9de25f88ef74c7fed81e8cdc30da77fc616f63c80bbca4bd03e998768689252eb9493da221067b1179cb0c054e000b6dc44ac985c07c5e72491c0b0ac6b9aa8fc40bb05182f6c817c454fec2bbf0b7422cf9e3720660d420a8867cf9aea7108bfe8d0356185a08df5eb3efec70ef13b4deb0cca70ca9305b9ef02e2560ccff572b98e492dd0a1c4be0a09bbcc2f248bede4ac781d78bb09967a8877a8e855e37f80c6b9c387f21540994d2faa6b7b76590c05788dcf790401febbb724f0c2956a218e47d69e1e55ee7652fd1314937d6be1c605a4be5fdcbb8c5ebea5b65bb53390e8d404ee2ae67921eddf4136173d95dae6dfb78035e4d82b8612f105aa71374ac562f901a29564edabaea589ca543ecc2d589b373dca77156d87ed034e45b837e210d19abfde3c18741c6d17d25e12733a88c2635bcb6a274a88384f7ff540348b7d35c557afed1f32d067eb694450a1db4097153375a2a2ca20ac2409d1f9e0093e80260ff0ce92c6b73ed92afbcec73aa07fab6dd2c7e2f431088d64cfa2d5b18c18866f451c8313a360a914e84e7e5aef9097abb75c954014be18cf096f6b071c516e5bb8255a149a39572dac276e09bc2b5b19cfeaedc038873849987b5bdda233d7ff9e3b8a43817ea76bf1fa8d5a87c65bc6aa92d44a9234c141831d47f3b5ff93ab558894cf6db62029c9ac54981ca5b8a201408e905019183f47aecadd0de6ddc77d556a8f43f3c47f67dd7ee12ac3f3b046c4f5bd75b29e3e5bdd2eaf95ab9513f1a6b477d8789426db16f8a4ca94987c5b02827df0e8afcc4178496a45b23fddce27057895020ff64d27bd596b2bb5bb0ab8f0a05488a77c522375996938e39421f78a708d2e53a4cfe7f01d8af94b71df2f67192f20d02b158f62a25cb1e65d846f77a24912094441134e6d0d94dd6d93d6dc33bf0efb5211280a84731efc1927fdab816bd3ca8df1d80ea328825fb165418d2aae84ab60ec94f8a36a41cbe90eba28ec87467873968388264e6cc7dcb98e3e6d9a8e4e9ddeaa88d68857671f84b49c8f16c1594c2f68cac0112eba9c41cf110c77560c04a94a720d5ca497cde39b8ebe3bbc958f9853b4426adc5fe2c97c1021b434b659e9886cc5b8c8e2489fbc17f3d189461ca93ca43454530b71cf7d04731d8fd349596bffcca8b8be7ff57cef61be27ffec621b5e2821c5e724b6faad18699bac802e98ec1f526dcd4a1ff7639e46de52fcba1f51ce35a175ad0b3665115d907c995c06c900ee24b92aadf8a3848646f22e3d88caeb65bf0cb2c7acbaffdb9991ff84759fcca2d3eb8d5bb309ad9baa783fa2b3044b1b895272bbcac7cc2e90dc9b87d2e24c244e924f7ff708446888afa72fb4cf982215af9eb0f1ae5af515ab48156b35143fd4db0cf93ca1e1cd43a236ec5d0577661f031f7c19f5b14e2f9063bc9a6fe7127f8973c29be4ab46cf83b82b17532e38b7be66b8d15bc74573052d0af431567641dcfe1d53bf92a05ca0a75477e3f38c138e8cdb7306a92892cbca3af0305933e7fe60fa644c72293db99df5ae041c71615ac0c0840d407ad766479b2cf96b0fff8c6579208af00c2e1a145eac7917e3461d130f14b5d850e51caedae9cee67acab56753c0ad3d89f1b758af55aa939487a0142c2f76946c351334a686f30f9da49cdbd9cd244f02ea8fdf2642ce0bf7588ef6454b545e364227cb63184d6e83ff1d7369463a54fb8135ac8377ef6c466fbf727ee710376439b3c43792572b490972330d2894f86cfe5aec5c64d843a81d426fe3d67060f0c896b35ff7e2799663392b1c289b618519bd823cca3e97697131eeb44fc69330f230704d23bbbd6f04a1cc21e0bee30dbee79cb0931b7fc23d1e968c5bc05a20eefa7e52dd4e6b4bf333134178021d6b82defa3204b14188ee8440300b70c4c8354263e767bc60c0082f3e5b4e4248fd0f66ff9a4f6f63486ee156e289423e25c288049cca7132dfc68fbccf260886629601c5eb7e1d2339853c85e45833cacd5d3b11c4af21534c530696911c9035bb6c22754f05af14d585c852d586e58eeaae6bbd7713622178c4a3aeeea8e99a3c883fe2eab4e6820ff9ac29a9ce5798e5781b92b24d78de9000996c6a226b967d5767f14d017dbceb55bc3ae0c7286f91fefdde62fc307b1694aa9d22ec840b0b680839666442fd02e9d6f5f6e4f4c9f262b544541e1762e5fcc0b0e5bd942e1bdf995f241dbcded31ea351bed03ab3f9b906fc07e6a75a549e4918d32d3d8e9dc225e6db5855b48b4e13af2d372a514cfbe59a95a2ebc3c1116146dc15b7b7944bee6d7b3a95f5187e6fe710b71688bc033d71f4cca5e5a5256dfea9a21ce39bc56adc7b80bdfd456e526b2fd6d030182d603bb61bd8510a38e636e931ca5d0886fa30bfc8cb93b4a713c61b9e5d0b0c22b3bda24970be1362eb42736077f1bc04c2c969f12a466896d7b2c3a3803980593719cbb99b604dc56100ea570ce18a9dd0cbe75de10d653114c59ce1b7d8cc908b0e7840111b618731950805172a5a20dd2421310727d4a58aefe8774abb4e33336c51b4d2c6fd205c3f3b3138f04b270e38bb448a5ed2a56e3f98f6f4f967cfa4d1f17b4806e84652b07952c8a7b153a56360e0295077970d2def448e2e57337684ddbdd1eb18c4792fd8c898af6a097d2165d4395534f3001695a2a8e7a9c4bb3c9136f805f9b94b90c7ce9a2346a3a0ee040f4c6723c4bbf95a6afc3cd19543bcbac9ec08f1798294e432f33bb2f7289340675d60408f7817415af692934aeae2987b298b9ce3e56f155de75a1b73214e0c11adb92df4b8cdccb59e9cb444095f93db230a0cf752a7d9cb2ae3d0811f2298e9dcd5e6894a45581e22d93fc5ae947a09b02d606cc7a6e12c167244ef06db132755e6a02ada071ced9302d8c5de5437845380eb77537897d11287448e151e213836e2c0a94a060e93c91e6866bac18634221b5e6b11d962038c7250cfc0f1d26f38335ca4813378a1c259a5af32085f915c3fe522343019744f9997606cdde820bbd4d4eeb96f13cd928a111f4ed2407c361f51f5a3e5d32ad1c4c74224e0594d15cc249c0a0960028194dd4da0a7d4ac6aa1066ddd8f2797f99afef77b1e150f7e77570429afcc0e8340369891be352b2b1f71a2d6552cf9118ade82b8651c2e71410a0bcaf5262ce5a45e58e4151bb2f753de9af36170e89839621e2184e051d969795f63827eaafb431031bcd63e703be70dcdbf3377237b2b603af66e5d459d65d47433e2443e382394f8ada82484e669488c6c4d6794df4f069b8e474662cabb16c32a161c180b92e17ba7e1d7bc9983a721a9345e1b7554bb3831a21e6741874c7331adba19db5903dcde3832e48a99bb8d3a893890cc1d7a83d3533a66b830e46f111da7642f9ecccbccbe91bbe6b8f5312ef5a04cbddeb21f580a17cada08c4bf353cdbc82338936b13155ca253fd12774d845b28aa33e783b00188fdfde238139acdd3b5c650ce757c59dce7fb963cd134017864bdee4ab4baf6926f815f1271b86bf7d5e1ba4f9abe4a9b15336afa559c92c3c14f2c47fe47e825681a1a179a944dcc6c246acfa5dbdc4ecc59cbe3fbf447b472e5ae3a39c4fc3e9bd07b7686e4018e6eb60f764a1c8eea86d13948bae348402c995496b646b9b9d23e135e005939020631939410fb22236a6cd7b2696b03e246fbdb13019d40cab391800cf267025280f5b41a6acdacaccf94a1f3141913dad08c20480ab7f26088ca2bc395945677cb92a5e258d80bd88de7a4a738e8a9efb9eb732ce2e9eef6c89da7623f373c886a6b25446de0de3e39e63874d698973f683b7308545de68494d5b0a194aac6261e8250e21a8b1092e43de2046d43b341234f5db13b53657997bbd085f64048ce0aefcf0e9887fa73c88ed354b6578c96c899a8fd737b1898b0e15807055ffc9545552d7ae7a61b9490092087f529bce5c50623614ac4f0ebcd43b1d00caac05538b21c46ccf7f92869bb421d4cdb11faa0f895912eb038bd5bc7dc4513af097426d0f8ac7bcc626cb1251cae5162c9219b3f93b1b694db73fdd4e63616ebeaaede8a0c0cd0d7dcb0069a9f4dcc26df26ceab56ee10d82af24934691526f75e5213f42018f5b2dc7646f212b730e2fbea561b994071a01e6ea248fd68d14f04c1fa4bcdefd4c3c0aa904b45c80b749558fdbe275e760fff457fc132aca68453b01bc23f50e68d90ca0f2e913ddc1de356f23bfcd3b56ec5774a142252168bea1870c11c287ef9e4206050b101b3ebe1958ce8a2ee67a29ec54ed153928af23355b9012d141189d7baecaef4cf558abb2540783db02be92e199272423321c2fd72ab16d599dea4a1d7e7638082040d23241327fdd100c38968aac8cdb3d6b8d3e6db5a482f4f784b4ef0c6c232e1a673cbc45217f6f363f1ca86cb3cb7439f2f3646050e398c92e3a7cdc8b7e12a5da05c938cc545d1cd15788081112532cdb44ddcdd22a00a9fc2b1c3827d23f96f378aeb678ad75faf6caeb45a50131169e4011beab0a93b93c389db7afb67d3d5314bbdd65ece8d148e743b105838300ec7164db2d8912c23bbcfda21b446c5b95e243c3c0b4907d8ed18953af226d13294afe9971e54abc146525eefbc5b3bbf7aa403e4edfe116cf0acbe08b2f139f0744c00b22d0fcf45e0d8ab86462a2b21329c912d098171f80d6c909c50887a1bb0d9a7905a573b3b7b13577477af77d50320c108c810ec431e3892b7e976c34ddc2e14e2369559fb3652f77d1d840b624e9c808458bbaa6810fc2f48cdc891dd3bb921f2ccff9d0ff882d3a65232e0ff84f43d6a6759fe7d7eb0eb7e98c38ceab2d90fb0d3913dcaf67f33c39f5d0144c85446716f5050435c1e78a0c790d303e45d5ae41406a3c11b1dd3d109a276db8b7f41af9c673e1607c05dc1b01152bd8310d6cae32fa669c4940fdb", 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:47 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9603, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:47 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:47 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:47 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00'}) 08:03:47 executing program 1: syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x1000, 'syz0\x00', @null, 0x7, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 08:03:47 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000080)=@raw=[@alu], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00'}) 08:03:47 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9604, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:47 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:47 executing program 0: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:47 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000080)=@raw=[@alu], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00'}) 08:03:47 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000300)="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", 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x2}, 0x20) 08:03:47 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:03:47 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9605, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:47 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:03:47 executing program 5: r0 = syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x5ac0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x6) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000000)={0x7ff, 0xc, [0x10001, 0x74aa, 0x2561b1c4]}) syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:03:47 executing program 0: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:47 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000280)) 08:03:48 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9606, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:48 executing program 0: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:48 executing program 5: r0 = syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x5ac0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x6) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000000)={0x7ff, 0xc, [0x10001, 0x74aa, 0x2561b1c4]}) syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:03:48 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, r1, 0x0, 0x2}, 0x40) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x2000004}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:03:48 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9607, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:48 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:50 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) r4 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r5, 0x0, 0x0) clone3(&(0x7f00000003c0)={0x8024000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000280), {0x4}, &(0x7f0000000300)=""/3, 0x3, &(0x7f0000000340)=""/58, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, r2, r4], 0x4, {r5}}, 0x58) 08:03:50 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) gettid() select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x400, 0x5, 0x100000000, 0x4, 0x1ff}, &(0x7f0000000100)={0x1, 0x0, 0x1ff, 0x8, 0x80000001, 0x8, 0x2, 0x3ff}, &(0x7f0000000140)={0xffffffff, 0x7ff, 0x1, 0xfffffffffffffffe, 0xce, 0xffffffffffffffe0, 0x4, 0x4df}, &(0x7f0000000180)) 08:03:50 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, r1, 0x0, 0x2}, 0x40) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x2000004}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:03:50 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9700, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:50 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:50 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:03:50 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 08:03:50 executing program 5: r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}) wait4(r0, 0x0, 0x40000000, &(0x7f0000000100)) syz_io_uring_setup(0x467, &(0x7f0000000040)={0x0, 0x195}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:03:50 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9701, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:50 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, r1, 0x0, 0x2}, 0x40) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x2000004}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:03:50 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:03:50 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x64, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7e5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x801) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x7) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socket$rxrpc(0x21, 0x2, 0x8) r1 = io_uring_setup(0x5afe, &(0x7f0000000380)={0x0, 0x800246a, 0x2, 0x1, 0x1a2}) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0xda44, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x52e8}, [@map={0x18, 0x4, 0x1, 0x0, 0x1}, @ldst={0x0, 0x1, 0x2, 0x9, 0x0, 0x30, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1d0}, @generic={0x9, 0x4, 0x1, 0x8280, 0xfffffffc}, @jmp={0x5, 0x1, 0xb, 0x9, 0x8, 0xfffffffffffffff8, 0x13}, @alu={0x4, 0x1, 0x8, 0x3, 0x3, 0xfffffffffffffffc, 0x1}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000480)='GPL\x00', 0xd0e6, 0x71, &(0x7f00000004c0)=""/113, 0x41100, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xc, 0x0, 0xa3c}, 0x10}, 0x78) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') 08:03:51 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) r4 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r5, 0x0, 0x0) clone3(&(0x7f00000003c0)={0x8024000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000280), {0x4}, &(0x7f0000000300)=""/3, 0x3, &(0x7f0000000340)=""/58, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, r2, r4], 0x4, {r5}}, 0x58) 08:03:51 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9702, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:51 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, r1, 0x0, 0x2}, 0x40) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 08:03:51 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:03:51 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=""/179, 0xb3, 0x40000100, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @mcast1, 0x4}}, 0x24) 08:03:52 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:03:52 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9703, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:52 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, r1, 0x0, 0x2}, 0x40) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 08:03:52 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:03:52 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, r1, 0x0, 0x2}, 0x40) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 08:03:52 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) r4 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r5, 0x0, 0x0) clone3(&(0x7f00000003c0)={0x8024000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000280), {0x4}, &(0x7f0000000300)=""/3, 0x3, &(0x7f0000000340)=""/58, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, r2, r4], 0x4, {r5}}, 0x58) 08:03:52 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x20) 08:03:52 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9704, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:52 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, r1, 0x0, 0x2}, 0x40) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 08:03:52 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3c000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:03:52 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9705, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:52 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xc]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:03:54 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) 08:03:54 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, r1, 0x0, 0x2}, 0x40) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) 08:03:54 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x12000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:03:54 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) r4 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r5, 0x0, 0x0) 08:03:54 executing program 0: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x3b04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:54 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9706, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:54 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2400]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:03:54 executing program 5: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x3806, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:54 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, r1, 0x0, 0x2}, 0x40) 08:03:54 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9707, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:54 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) r4 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) 08:03:54 executing program 0: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x3607, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:55 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) 08:03:55 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40010060) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:03:55 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9800, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:55 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:03:55 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) r4 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) 08:03:55 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x12000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:03:55 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) 08:03:55 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:03:55 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) 08:03:55 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9801, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:55 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) gettid() 08:03:55 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:03:58 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) 08:03:58 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9802, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:58 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) 08:03:58 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:03:58 executing program 0: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) r4 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, 0x0) 08:03:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:03:58 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9803, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:03:58 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) 08:03:59 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) 08:03:59 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 08:03:59 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000001480)={0x580, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x6, 0x1, 0x1b, [0x4, 0x8, 0x0, 0xffff, 0xd4, 0x9, 0x10000, 0x94a, 0x9e8, 0x3, 0x5, 0x50000000, 0x4, 0xffffffff, 0x5, 0x7, 0x6, 0x89, 0x8001, 0x3, 0x8, 0x100, 0xc06, 0x9, 0xb30, 0x0, 0xfffffff9, 0x9, 0x6, 0x8, 0x2, 0x9, 0x6, 0x6, 0x0, 0x1a, 0x2, 0x3, 0x5, 0x2, 0x4, 0x6, 0x3, 0x16, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x3, 0x80000001, 0x8def, 0x20000, 0x200, 0x1a48, 0x73fa, 0x40, 0x10001, 0xfffffe00, 0x2, 0x3, 0x3, 0x8001, 0x6], [0x5, 0xcb6d, 0x2, 0x2, 0x79ee, 0x4, 0x5, 0xd7, 0x6, 0x8, 0x4, 0xffffffc1, 0x8c, 0x7, 0x9, 0x0, 0xd16e, 0x2, 0x370000, 0x4, 0x9, 0x231, 0x46, 0x3, 0x6, 0x3, 0x1d4, 0x6b7, 0x3ff, 0x5, 0x800, 0x2, 0xfff, 0x7, 0x5, 0x3909, 0x7f, 0x6, 0x6, 0xc7b, 0x8, 0x3, 0x3f, 0x2, 0x5, 0x5, 0x2, 0x2, 0x401, 0x20, 0x0, 0x3, 0x7, 0x6, 0x96ff, 0x5, 0xb9, 0x8, 0x2, 0x0, 0xc00000, 0x80000000, 0x60000000, 0x1], [0x9, 0x9, 0x0, 0x5, 0x7, 0x7f, 0xff, 0x4, 0xe98, 0x9, 0x7, 0x81, 0x2, 0x40000, 0x1, 0x400, 0x40, 0x2, 0x7, 0x9, 0x0, 0x8, 0x9, 0x2, 0x2, 0xe8e30e7, 0x401, 0xfffffffc, 0x3ff, 0x3ff, 0x461, 0x3f, 0x9, 0xd66f, 0xfffff001, 0x7, 0x4, 0xa9d4, 0x6, 0x7ff, 0x8225, 0xfffff801, 0x1, 0x4040000, 0x3fe, 0x7fff, 0x40, 0xfffffc00, 0x4, 0x7, 0x1000, 0x59e4800, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xf7, 0x7ff, 0x0, 0x7f, 0x4], [0x9e9, 0x80, 0xff, 0x1ff, 0x6, 0xe16e, 0x2604, 0x6, 0x7, 0x8, 0x3, 0x10001, 0x7, 0x200, 0x7, 0x5, 0x6, 0x1ff, 0x40, 0x9, 0x8, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x2, 0x9, 0x5, 0x4, 0x3, 0x8001, 0xffff, 0xfffffffd, 0x2, 0x1, 0x1, 0x20, 0x2, 0x3, 0x9, 0x2ca, 0x80000000, 0x40, 0x58, 0x7, 0x2, 0x4, 0x5, 0xc6a, 0x1dd5, 0xff16, 0x4, 0x7cfdddb0, 0xffffffff, 0x3, 0x4, 0x5, 0x1, 0x1, 0x4, 0x3, 0xffffffff, 0x6], 0x15d, ['/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '/dev/vcwu\x00).\x8d)\r\xa41\xb7\xe3\x18\xdd5A+$\x11\xce\x01\x83\xc7\x0e\x02n\xd1B\xe5%\xb0\xe7\x1e\xd5\x99\xa2\xf4\x0e\x16T\x87\xe6Q\x9a\x03z%\xad\x00-\x1a(f&w,b\xf7\xffHNL\xd08\xe8(.+S:\xba\x8d\x15\xb4}', '.*!\xae]\x00\x9c\xae/W\\\x1dg\x80\x00ZT\xde\x17w\xc0t\x87^\xf0\xe0\xc8\x13^\xc7R2!\xe7\x02\xd7\xd0H\xa9\x97\x01\xb5\xbe\xb3\x06\xd1\n\xab\x14L\x13z\x9c>O\x9aL\xbe\xd6\xb3u\xd7r&\xcc \x80\xf8\xc0\x9fyislD\xd9^\x12L\xf4\xaf\xdc\x89!\xb7?\xb0Tw\b#)9\xb7\x87o\xae[\xe8\xaa1\x02\xcbP\x85\xfc\xb6u\xb3\x04\xb5n\xd0\xe3\xc1nP\xd4k\x137\xddZ\xd5$(:\xb8\xf8d\xb4D\xee`s@\xa5J\xee\x0f\xbd\x82?{\x9d3g\x85}\xb4y\xe7=\x14}\xecA\x10\xd7q\x9f\x1f\x10\xfa\x97c\xfa;\x8f\xccM\xe9\xa1\xec\xbf\x93!BWb\xb3\xd3\xea#\xae\x8f\xfe\xab\xda\xbf\xc4\xc6/\xa4x\x94Fy,\x7f\xe4\x0e\xea\x91ww}\xd4\xc3\xf7\xa7', '/dev/vcsu\x00']}, ["", "", "", ""]}, 0x580}, 0x1, 0x0, 0x0, 0x44025}, 0x24040801) 08:03:59 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9804, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:01 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:01 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 08:04:01 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9805, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:01 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000}) 08:04:01 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:01 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 08:04:01 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x300]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:01 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9806, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:01 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) mlockall(0x1) 08:04:01 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) 08:04:01 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:04:01 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9807, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:01 executing program 0: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x1], 0x1, 0x80000}) 08:04:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:04:01 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9900, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:02 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) 08:04:02 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:02 executing program 0: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r2 = gettid() bind$l2tp6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @local, 0x10000, 0x3}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) 08:04:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:04:03 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x36]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:03 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9901, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:03 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) gettid() 08:04:03 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) gettid() mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:03 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x18000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x98, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:04:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:04:03 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9902, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:03 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x36]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:03 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:03 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:04:03 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9903, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:03 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x24]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:03 executing program 5: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x2d06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:04 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:04 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 08:04:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xeaa2, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:04:04 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9904, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:04 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:04 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x98, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 08:04:05 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 08:04:05 executing program 0: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 08:04:05 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9905, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:05 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) gettid() mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x98}, 0x40) 08:04:07 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:07 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:07 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9906, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:07 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) gettid() mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:07 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x549000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:07 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:07 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:07 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:07 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9907, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:07 executing program 2: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x2c01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:07 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1e000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:07 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:09 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:09 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9a00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:09 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x18000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:09 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:09 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1e00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:09 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) gettid() mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:10 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x8000000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:10 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) prctl$PR_CAP_AMBIENT(0x7, 0x4, 0x22) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:10 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9a01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:10 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:10 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:10 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9a02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:12 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:12 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x18000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:12 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:12 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9a03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:12 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7e}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:13 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:13 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:13 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x400000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:13 executing program 4: shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:13 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9a04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:13 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9a05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:14 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:14 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2a}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:14 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:14 executing program 4: r0 = syz_open_dev$dri(0x0, 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:14 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9a06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:15 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:15 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:15 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9a07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:15 executing program 4: r0 = syz_open_dev$dri(0x0, 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:15 executing program 4: r0 = syz_open_dev$dri(0x0, 0x853e, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:15 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9b00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:17 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:17 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:17 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9b01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:17 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:17 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:17 executing program 0: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x2704, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:17 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9b02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:18 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:18 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9b03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:18 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x12}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:19 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:19 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:19 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0xffff8000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:19 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9b04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:20 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:20 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:20 executing program 5: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x2507, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:20 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 08:04:20 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9b05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 08:04:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 08:04:21 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x3f000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:22 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:22 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9b06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:22 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffff8000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:22 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x1e000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:22 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 08:04:22 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x700}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:22 executing program 5: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x2400, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:22 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9b07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) 08:04:23 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:23 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9c00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:24 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:24 executing program 5: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x2400, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:24 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x18000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:24 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:24 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9c01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:24 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x3c000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:24 executing program 5: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x2400, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:24 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:24 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:24 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9c02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:24 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x30000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:24 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:26 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:26 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x6000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:26 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9c03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:26 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x12000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:26 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x10000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:27 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:27 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9c04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:27 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x3600}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:27 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:27 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x3c00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:27 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9c05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:27 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9c06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:29 executing program 1: syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:29 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x8000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:29 executing program 0: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x2001, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:29 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9c07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:30 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2a00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:30 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:30 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x5000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:30 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9d00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:31 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0xc00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:31 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x1d00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:31 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9d01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:31 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:32 executing program 1: syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:32 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x400000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:32 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x36d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:32 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9d02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:32 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1d00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:33 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x3000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:33 executing program 4: syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:33 executing program 0: syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:33 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9d03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:33 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x12000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:33 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2a00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:33 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9d04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:35 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:35 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x2a00}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:35 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:35 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9d05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:35 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x600}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:35 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9d06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:36 executing program 4: syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:36 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x1c00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:36 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x500}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:36 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9d07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:36 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x1300}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:36 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9e00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:37 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:37 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x600000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:37 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x600}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:37 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:37 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9e01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:38 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9e02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:38 executing program 4: syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:38 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:38 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2a}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:38 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0xc}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:38 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9e03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:38 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9e04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:40 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:40 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x121}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:40 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:40 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9e05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:40 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:40 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9e06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:41 executing program 4: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x1a07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:41 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x60}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:41 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x30}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:41 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9e07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:41 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3600}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:41 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9f00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:42 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:42 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x12}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:42 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1200}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:42 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:04:42 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9f01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:42 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:42 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:43 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x0, 0xc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:43 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x30}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:43 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9f02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:43 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0xfffffffe}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:43 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:44 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:44 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9f03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:44 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x42000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:44 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:44 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:44 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:45 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:45 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:45 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:45 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:45 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9f04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:45 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:46 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:46 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x10000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:46 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:46 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9f05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:46 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:46 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:47 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:47 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9f06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:47 executing program 4: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:47 executing program 5: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x1400, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:47 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:47 executing program 4: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:48 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:48 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:04:48 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:48 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x9f07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:48 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:48 executing program 4: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:48 executing program 2: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:48 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:48 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:48 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:48 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa000, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:48 executing program 2: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:49 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:49 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:49 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:49 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:49 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa001, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:49 executing program 2: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:49 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:49 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:49 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:49 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:49 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa002, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:49 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:51 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:51 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:51 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:51 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:51 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa003, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:51 executing program 0: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:51 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:51 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:51 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:51 executing program 0: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:51 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa004, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:51 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:52 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:52 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:52 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:52 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa005, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:52 executing program 0: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:52 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:52 executing program 5: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:52 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:52 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:52 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa006, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:52 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:52 executing program 5: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:53 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:53 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:53 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:53 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa007, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:53 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:53 executing program 5: syz_io_uring_setup(0x469, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:54 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:54 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:54 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:54 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa100, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:54 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:54 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:55 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:55 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:55 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:55 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:04:55 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa101, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:55 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:04:55 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:04:55 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:55 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:55 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:04:55 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa102, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:55 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x13000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:04:56 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:56 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:56 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:04:56 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:56 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:56 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa103, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:57 executing program 4: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:57 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:57 executing program 2: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:57 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa104, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:57 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:57 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:59 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:59 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:04:59 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa105, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:59 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:59 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:04:59 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:59 executing program 4: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:59 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa106, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:04:59 executing program 2: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:59 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:04:59 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:04:59 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa107, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:01 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:01 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000280)) 08:05:01 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:05:01 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa200, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:01 executing program 0: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:01 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:05:01 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:01 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa201, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:02 executing program 2: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:02 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:05:02 executing program 4: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:02 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa202, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:04 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:04 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa203, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:04 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 08:05:04 executing program 5: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:04 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x1e00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:04 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa204, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:05 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa205, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:05 executing program 0: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x1300, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:05 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x3000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:05 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x400000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:05 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa206, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:05 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x3600}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:06 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:06 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa207, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:06 executing program 4: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x1102, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:06 executing program 5: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:06 executing program 0: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0x1007, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:06 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:06 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa300, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:07 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:07 executing program 4: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:07 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:07 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa301, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:07 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:09 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:09 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:09 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:09 executing program 5: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:09 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa302, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:09 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:09 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:09 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x121}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:09 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:09 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa303, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:09 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:09 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0xffff8000, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:11 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:11 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa304, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:11 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x2a000000, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:11 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:11 executing program 2: syz_io_uring_setup(0x468, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:11 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x30}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:11 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa305, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:11 executing program 2: syz_io_uring_setup(0x468, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:11 executing program 0: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:11 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:11 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:11 executing program 2: syz_io_uring_setup(0x468, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:13 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:13 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa306, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:13 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:13 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x3f000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:13 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:13 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x1d000000, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:13 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x7000000, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:13 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:14 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:14 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa307, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:14 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x12000000, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:14 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:15 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:15 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:15 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa400, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:15 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:15 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x8000000, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:15 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:15 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:15 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x1e000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:15 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:15 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa401, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:15 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x1c000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:15 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0xfeffffff}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:16 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x0) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:16 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x70030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:16 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0xfeffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:16 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa402, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:16 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x10000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:16 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x400000, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:16 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa403, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:16 executing program 0: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mlockall(0x1) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:16 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x20ffd000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:16 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x4000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:16 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x3f00, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:16 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x0) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:16 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa404, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:17 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x18000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:17 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x1000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:17 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x12000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:17 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x0) syz_io_uring_setup(0x79a, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:17 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa405, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:17 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x3000, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:18 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x1c00, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:18 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x7000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:18 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x1d00, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:18 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:18 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa406, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:18 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x1300, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:18 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x107500}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:18 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa407, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:18 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:18 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x1200, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:18 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0xd0ff20}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:18 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0xc0ff20}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:19 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x60ff}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:19 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x600, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:19 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa500, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:20 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:20 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x300, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:20 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x4200}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:20 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x4000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:20 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa501, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:20 executing program 0: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:20 executing program 5: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:20 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa502, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:20 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x30, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:20 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x1c, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:20 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x1a01}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:20 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa503, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:22 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:22 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x1e00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:22 executing program 2: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x1d00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:22 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0xc00}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:22 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa504, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:22 executing program 5: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:22 executing program 0: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x12, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:22 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa505, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:22 executing program 2: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x8, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:22 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x600}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:22 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa506, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:22 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:23 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:23 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:23 executing program 4: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x7, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:23 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa507, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:23 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:24 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x36f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:24 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa600, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:24 executing program 4: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:24 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x3c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:24 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:24 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:24 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:25 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:25 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:25 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa601, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:25 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x2a}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:25 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:25 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:25 executing program 5: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:26 executing program 4: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:26 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa602, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:26 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:26 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:27 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:27 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:27 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:27 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa603, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:27 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:28 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa604, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:28 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:28 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x1e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:29 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa605, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:29 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:29 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:29 executing program 5: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x1c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), 0x0) 08:05:29 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:30 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:30 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:30 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3483, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:30 executing program 2: syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:30 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa606, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:30 executing program 4 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2402.081745][T28060] FAULT_INJECTION: forcing a failure. [ 2402.081745][T28060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2402.150116][T28060] CPU: 1 PID: 28060 Comm: syz-executor.4 Not tainted 5.10.0-syzkaller #0 [ 2402.158687][T28060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2402.168791][T28060] Call Trace: [ 2402.172110][T28060] dump_stack+0x107/0x163 [ 2402.176492][T28060] should_fail.cold+0x5/0x1f [ 2402.182679][T28060] _copy_from_user+0x2c/0x180 [ 2402.187645][T28060] io_uring_setup+0xa3/0x38b0 [ 2402.192442][T28060] ? ksys_write+0x12d/0x250 08:05:30 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2402.196981][T28060] ? io_link_timeout_fn+0x480/0x480 [ 2402.202231][T28060] ? wait_for_completion_io+0x260/0x260 [ 2402.207800][T28060] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2402.216350][T28060] ? vfs_write+0x18e/0xa80 [ 2402.220791][T28060] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2402.227055][T28060] ? fput+0x2a/0x50 [ 2402.230894][T28060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2402.236821][T28060] do_syscall_64+0x2d/0x70 [ 2402.241264][T28060] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2402.247302][T28060] RIP: 0033:0x45e149 [ 2402.251213][T28060] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2402.270963][T28060] RSP: 002b:00007f95bd4fcbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2402.279399][T28060] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e149 [ 2402.287386][T28060] RDX: 0000000020c00000 RSI: 0000000020000040 RDI: 0000000000000468 08:05:30 executing program 2: syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2402.295669][T28060] RBP: 00007f95bd4fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 2402.303656][T28060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020c00000 [ 2402.311640][T28060] R13: 0000000020ffd000 R14: 0000000000000000 R15: 0000000000000000 08:05:30 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa607, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:30 executing program 5 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:30 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:30 executing program 2: syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2402.612850][T28100] FAULT_INJECTION: forcing a failure. [ 2402.612850][T28100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2402.670730][T28100] CPU: 1 PID: 28100 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2402.681842][T28100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2402.692013][T28100] Call Trace: [ 2402.695481][T28100] dump_stack+0x107/0x163 [ 2402.699894][T28100] should_fail.cold+0x5/0x1f [ 2402.704656][T28100] _copy_from_user+0x2c/0x180 [ 2402.709362][T28100] io_uring_setup+0xa3/0x38b0 [ 2402.714077][T28100] ? ksys_write+0x12d/0x250 [ 2402.718790][T28100] ? io_link_timeout_fn+0x480/0x480 [ 2402.724201][T28100] ? wait_for_completion_io+0x260/0x260 [ 2402.729776][T28100] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2402.736049][T28100] ? vfs_write+0x18e/0xa80 [ 2402.740493][T28100] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2402.746763][T28100] ? fput+0x2a/0x50 [ 2402.750609][T28100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2402.756559][T28100] do_syscall_64+0x2d/0x70 [ 2402.761011][T28100] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2402.766934][T28100] RIP: 0033:0x45e149 [ 2402.770846][T28100] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2402.790476][T28100] RSP: 002b:00007f83ca0fdbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2402.799113][T28100] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e149 [ 2402.807465][T28100] RDX: 0000000020ffd000 RSI: 0000000020000040 RDI: 0000000000000469 [ 2402.815451][T28100] RBP: 00007f83ca0fdca0 R08: 0000000020000280 R09: 0000000020000280 [ 2402.823438][T28100] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000020ffd000 [ 2402.831441][T28100] R13: 0000000020ffd000 R14: 0000000020000280 R15: 00000000200000c0 08:05:31 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x0, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:31 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa700, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:31 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:31 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:31 executing program 5 (fault-call:0 fault-nth:1): syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2403.847117][T28129] FAULT_INJECTION: forcing a failure. [ 2403.847117][T28129] name failslab, interval 1, probability 0, space 0, times 0 08:05:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2403.914153][T28129] CPU: 1 PID: 28129 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2403.922630][T28129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2403.932709][T28129] Call Trace: [ 2403.936032][T28129] dump_stack+0x107/0x163 [ 2403.940489][T28129] should_fail.cold+0x5/0x1f [ 2403.945109][T28129] should_failslab+0x5/0x10 [ 2403.949924][T28129] kmem_cache_alloc_trace+0x57/0x300 [ 2403.955256][T28129] io_uring_setup+0x51a/0x38b0 [ 2403.960038][T28129] ? ksys_write+0x12d/0x250 08:05:32 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa701, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:32 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2403.964650][T28129] ? io_link_timeout_fn+0x480/0x480 [ 2403.969888][T28129] ? wait_for_completion_io+0x260/0x260 [ 2403.975483][T28129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2403.981428][T28129] do_syscall_64+0x2d/0x70 [ 2403.985868][T28129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2403.991803][T28129] RIP: 0033:0x45e149 08:05:32 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2403.995715][T28129] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2404.015355][T28129] RSP: 002b:00007f83ca0fdbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2404.023814][T28129] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e149 [ 2404.031805][T28129] RDX: 0000000020ffd000 RSI: 0000000020000040 RDI: 0000000000000469 [ 2404.039793][T28129] RBP: 00007f83ca0fdca0 R08: 0000000020000280 R09: 0000000020000280 [ 2404.047780][T28129] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000020ffd000 [ 2404.055811][T28129] R13: 0000000020ffd000 R14: 0000000020000280 R15: 00000000200000c0 08:05:32 executing program 0: syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:32 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:33 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x0, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:33 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa702, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:33 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:33 executing program 0: syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:33 executing program 5 (fault-call:0 fault-nth:2): syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:33 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x7, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2405.461345][T28179] FAULT_INJECTION: forcing a failure. [ 2405.461345][T28179] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.498844][T28179] CPU: 0 PID: 28179 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2405.507318][T28179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2405.517392][T28179] Call Trace: [ 2405.520685][T28179] dump_stack+0x107/0x163 [ 2405.525075][T28179] should_fail.cold+0x5/0x1f [ 2405.529696][T28179] should_failslab+0x5/0x10 [ 2405.534223][T28179] kmem_cache_alloc+0x54/0x3d0 [ 2405.539023][T28179] io_uring_setup+0x53c/0x38b0 [ 2405.543814][T28179] ? ksys_write+0x12d/0x250 [ 2405.548350][T28179] ? io_link_timeout_fn+0x480/0x480 [ 2405.553572][T28179] ? wait_for_completion_io+0x260/0x260 [ 2405.559167][T28179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2405.565097][T28179] do_syscall_64+0x2d/0x70 [ 2405.569540][T28179] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2405.578620][T28179] RIP: 0033:0x45e149 [ 2405.582534][T28179] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:05:33 executing program 0: syz_io_uring_setup(0x56c8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:33 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa703, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:33 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x8, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2405.605206][T28179] RSP: 002b:00007f83ca0fdbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2405.613829][T28179] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e149 [ 2405.621822][T28179] RDX: 0000000020ffd000 RSI: 0000000020000040 RDI: 0000000000000469 [ 2405.629909][T28179] RBP: 00007f83ca0fdca0 R08: 0000000020000280 R09: 0000000020000280 [ 2405.637900][T28179] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000020ffd000 [ 2405.645888][T28179] R13: 0000000020ffd000 R14: 0000000020000280 R15: 00000000200000c0 08:05:33 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:33 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:33 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x21, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:34 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x0, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:34 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa704, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:34 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x7e, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:34 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:34 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) 08:05:34 executing program 5 (fault-call:0 fault-nth:3): syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2406.930566][T28225] FAULT_INJECTION: forcing a failure. [ 2406.930566][T28225] name failslab, interval 1, probability 0, space 0, times 0 08:05:35 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x700, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2407.009200][T28225] CPU: 1 PID: 28225 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2407.017699][T28225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2407.027778][T28225] Call Trace: [ 2407.031074][T28225] dump_stack+0x107/0x163 [ 2407.035437][T28225] should_fail.cold+0x5/0x1f [ 2407.040066][T28225] ? io_uring_setup+0x602/0x38b0 [ 2407.045032][T28225] should_failslab+0x5/0x10 [ 2407.049677][T28225] __kmalloc+0x79/0x340 [ 2407.053868][T28225] ? kmem_cache_alloc+0x343/0x3d0 [ 2407.058935][T28225] io_uring_setup+0x602/0x38b0 [ 2407.063762][T28225] ? io_link_timeout_fn+0x480/0x480 [ 2407.068989][T28225] ? wait_for_completion_io+0x260/0x260 [ 2407.074704][T28225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2407.080638][T28225] do_syscall_64+0x2d/0x70 [ 2407.085081][T28225] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2407.091007][T28225] RIP: 0033:0x45e149 [ 2407.094923][T28225] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2407.114642][T28225] RSP: 002b:00007f83ca0fdbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2407.123089][T28225] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e149 [ 2407.131114][T28225] RDX: 0000000020ffd000 RSI: 0000000020000040 RDI: 0000000000000469 [ 2407.139106][T28225] RBP: 00007f83ca0fdca0 R08: 0000000020000280 R09: 0000000020000280 [ 2407.147098][T28225] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000020ffd000 08:05:35 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2407.155176][T28225] R13: 0000000020ffd000 R14: 0000000020000280 R15: 00000000200000c0 08:05:35 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa705, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:35 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) 08:05:35 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x1a01, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:35 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:36 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x0, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:36 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa706, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:36 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) 08:05:36 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x4000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:36 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:36 executing program 5 (fault-call:0 fault-nth:4): syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2408.569727][T28283] FAULT_INJECTION: forcing a failure. [ 2408.569727][T28283] name failslab, interval 1, probability 0, space 0, times 0 08:05:36 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x5a01, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:36 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2408.671044][T28283] CPU: 1 PID: 28283 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2408.679531][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2408.689619][T28283] Call Trace: [ 2408.692916][T28283] dump_stack+0x107/0x163 [ 2408.697367][T28283] should_fail.cold+0x5/0x1f [ 2408.701988][T28283] should_failslab+0x5/0x10 [ 2408.706516][T28283] kmem_cache_alloc_trace+0x57/0x300 [ 2408.711839][T28283] ? __io_openat_prep+0x390/0x390 [ 2408.716891][T28283] percpu_ref_init+0xd2/0x3a0 [ 2408.721606][T28283] io_uring_setup+0x6ac/0x38b0 [ 2408.726404][T28283] ? io_link_timeout_fn+0x480/0x480 [ 2408.731629][T28283] ? wait_for_completion_io+0x260/0x260 [ 2408.737224][T28283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2408.743155][T28283] do_syscall_64+0x2d/0x70 [ 2408.747589][T28283] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2408.753540][T28283] RIP: 0033:0x45e149 [ 2408.757449][T28283] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2408.777077][T28283] RSP: 002b:00007f83ca0fdbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2408.785520][T28283] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e149 [ 2408.793597][T28283] RDX: 0000000020ffd000 RSI: 0000000020000040 RDI: 0000000000000469 [ 2408.801582][T28283] RBP: 00007f83ca0fdca0 R08: 0000000020000280 R09: 0000000020000280 [ 2408.809590][T28283] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000020ffd000 08:05:36 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) [ 2408.817579][T28283] R13: 0000000020ffd000 R14: 0000000020000280 R15: 00000000200000c0 08:05:36 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa707, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:37 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x60ff, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:37 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) 08:05:38 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x0, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:38 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) 08:05:38 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa800, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:38 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) 08:05:38 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x7e00, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:38 executing program 5 (fault-call:0 fault-nth:5): syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2410.187501][T28337] FAULT_INJECTION: forcing a failure. [ 2410.187501][T28337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:05:38 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x20000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2410.268536][T28337] CPU: 1 PID: 28337 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2410.277169][T28337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2410.291763][T28337] Call Trace: [ 2410.295063][T28337] dump_stack+0x107/0x163 [ 2410.299431][T28337] should_fail.cold+0x5/0x1f [ 2410.304059][T28337] __alloc_pages_nodemask+0x189/0x740 [ 2410.309468][T28337] ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260 [ 2410.316270][T28337] ? io_uring_setup+0x12e4/0x38b0 [ 2410.321325][T28337] ? lock_downgrade+0x6d0/0x6d0 [ 2410.326211][T28337] alloc_pages_current+0x18c/0x2a0 [ 2410.331382][T28337] __get_free_pages+0x8/0x40 [ 2410.335995][T28337] io_uring_setup+0x1515/0x38b0 [ 2410.340884][T28337] ? io_link_timeout_fn+0x480/0x480 [ 2410.346110][T28337] ? wait_for_completion_io+0x260/0x260 [ 2410.351712][T28337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2410.357649][T28337] do_syscall_64+0x2d/0x70 [ 2410.362090][T28337] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2410.368020][T28337] RIP: 0033:0x45e149 [ 2410.371930][T28337] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2410.391827][T28337] RSP: 002b:00007f83ca0fdbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2410.400276][T28337] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e149 [ 2410.408272][T28337] RDX: 0000000020ffd000 RSI: 0000000020000040 RDI: 0000000000000469 08:05:38 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa801, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:38 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) [ 2410.416264][T28337] RBP: 00007f83ca0fdca0 R08: 0000000020000280 R09: 0000000020000280 [ 2410.424340][T28337] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000020ffd000 [ 2410.432331][T28337] R13: 0000000020ffd000 R14: 0000000020000280 R15: 00000000200000c0 08:05:38 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) 08:05:38 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x107500, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:38 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) 08:05:39 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:39 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa802, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:39 executing program 2: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1, 0x0, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:39 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) 08:05:39 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x400000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:39 executing program 5 (fault-call:0 fault-nth:6): syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2411.860262][T28385] FAULT_INJECTION: forcing a failure. [ 2411.860262][T28385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:05:39 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x549000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2411.932273][T28385] CPU: 0 PID: 28385 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2411.940780][T28385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2411.950881][T28385] Call Trace: [ 2411.954181][T28385] dump_stack+0x107/0x163 [ 2411.958550][T28385] should_fail.cold+0x5/0x1f [ 2411.963380][T28385] __alloc_pages_nodemask+0x189/0x740 [ 2411.968786][T28385] ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260 [ 2411.975592][T28385] ? io_uring_setup+0x12e4/0x38b0 [ 2411.980645][T28385] ? lock_downgrade+0x6d0/0x6d0 [ 2411.985536][T28385] alloc_pages_current+0x18c/0x2a0 [ 2411.990677][T28385] __get_free_pages+0x8/0x40 [ 2411.995300][T28385] io_uring_setup+0x16cb/0x38b0 [ 2412.000186][T28385] ? io_link_timeout_fn+0x480/0x480 [ 2412.005414][T28385] ? wait_for_completion_io+0x260/0x260 [ 2412.011015][T28385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.016947][T28385] do_syscall_64+0x2d/0x70 [ 2412.021391][T28385] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2412.027311][T28385] RIP: 0033:0x45e149 [ 2412.031220][T28385] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2412.050941][T28385] RSP: 002b:00007f83ca0fdbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2412.059380][T28385] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e149 [ 2412.067372][T28385] RDX: 0000000020ffd000 RSI: 0000000020000040 RDI: 0000000000000469 08:05:40 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa803, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2412.075367][T28385] RBP: 00007f83ca0fdca0 R08: 0000000020000280 R09: 0000000020000280 [ 2412.083448][T28385] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000020ffd000 [ 2412.091441][T28385] R13: 0000000020ffd000 R14: 0000000020000280 R15: 00000000200000c0 08:05:40 executing program 0: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) 08:05:40 executing program 5 (fault-call:0 fault-nth:7): syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:40 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x748000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:40 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa804, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2412.410275][T28409] FAULT_INJECTION: forcing a failure. [ 2412.410275][T28409] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.493329][T28409] CPU: 0 PID: 28409 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2412.502074][T28409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2412.512155][T28409] Call Trace: [ 2412.515462][T28409] dump_stack+0x107/0x163 [ 2412.519830][T28409] should_fail.cold+0x5/0x1f [ 2412.524460][T28409] should_failslab+0x5/0x10 [ 2412.529081][T28409] kmem_cache_alloc_trace+0x57/0x300 [ 2412.534407][T28409] io_uring_setup+0x2180/0x38b0 [ 2412.539330][T28409] ? io_link_timeout_fn+0x480/0x480 [ 2412.544555][T28409] ? wait_for_completion_io+0x260/0x260 [ 2412.550146][T28409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.556078][T28409] do_syscall_64+0x2d/0x70 [ 2412.560529][T28409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2412.566456][T28409] RIP: 0033:0x45e149 [ 2412.570368][T28409] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2412.590001][T28409] RSP: 002b:00007f83ca0fdbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2412.598969][T28409] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e149 [ 2412.607744][T28409] RDX: 0000000020ffd000 RSI: 0000000020000040 RDI: 0000000000000469 [ 2412.615832][T28409] RBP: 00007f83ca0fdca0 R08: 0000000020000280 R09: 0000000020000280 [ 2412.623826][T28409] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000020ffd000 [ 2412.631816][T28409] R13: 0000000020ffd000 R14: 0000000020000280 R15: 00000000200000c0 08:05:42 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:05:42 executing program 0: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x0, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:42 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa805, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:42 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x751000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:42 executing program 5 (fault-call:0 fault-nth:8): syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:42 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2414.028173][T28433] FAULT_INJECTION: forcing a failure. [ 2414.028173][T28433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2414.104399][T28433] CPU: 1 PID: 28433 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2414.113002][T28433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2414.123094][T28433] Call Trace: [ 2414.126418][T28433] dump_stack+0x107/0x163 [ 2414.130783][T28433] should_fail.cold+0x5/0x1f [ 2414.135410][T28433] _copy_to_user+0x2c/0x150 [ 2414.139940][T28433] simple_read_from_buffer+0xcc/0x160 [ 2414.145469][T28433] proc_fail_nth_read+0x187/0x220 08:05:42 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x807400, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2414.150546][T28433] ? proc_fault_inject_read+0x220/0x220 [ 2414.156117][T28433] ? security_file_permission+0x248/0x560 [ 2414.161874][T28433] ? proc_fault_inject_read+0x220/0x220 [ 2414.167445][T28433] vfs_read+0x1b5/0x570 [ 2414.171627][T28433] ksys_read+0x12d/0x250 [ 2414.175911][T28433] ? vfs_write+0xa80/0xa80 [ 2414.180355][T28433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2414.186290][T28433] do_syscall_64+0x2d/0x70 [ 2414.190839][T28433] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2414.196761][T28433] RIP: 0033:0x417a41 [ 2414.200674][T28433] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2414.220304][T28433] RSP: 002b:00007f83ca0fdc70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 2414.228749][T28433] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000417a41 [ 2414.236737][T28433] RDX: 000000000000000f RSI: 00007f83ca0fdcb0 RDI: 0000000000000003 [ 2414.244747][T28433] RBP: 00007f83ca0fdca0 R08: ffffffffffffffff R09: 0000000010000000 08:05:42 executing program 2: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2414.252736][T28433] R10: 0000000000008011 R11: 0000000000000293 R12: 0000000000000008 [ 2414.260746][T28433] R13: 00007ffd87e9de4f R14: 00007f83ca0fe9c0 R15: 000000000119bf8c 08:05:42 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa806, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:42 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x905400, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:42 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa807, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:42 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x1000000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:44 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 08:05:44 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa900, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:44 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x11a0000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:44 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:44 executing program 0: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:05:44 executing program 2 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2416.814592][T28495] FAULT_INJECTION: forcing a failure. [ 2416.814592][T28495] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:05:44 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa901, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2416.900548][T28495] CPU: 1 PID: 28495 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 2416.909406][T28495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2416.919758][T28495] Call Trace: [ 2416.923070][T28495] dump_stack+0x107/0x163 [ 2416.927446][T28495] should_fail.cold+0x5/0x1f [ 2416.932080][T28495] _copy_from_user+0x2c/0x180 [ 2416.936796][T28495] io_uring_setup+0xa3/0x38b0 [ 2416.941595][T28495] ? ksys_write+0x12d/0x250 [ 2416.946718][T28495] ? io_link_timeout_fn+0x480/0x480 [ 2416.951952][T28495] ? wait_for_completion_io+0x260/0x260 [ 2416.957599][T28495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2416.963884][T28495] ? vfs_write+0x18e/0xa80 [ 2416.968333][T28495] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2416.974668][T28495] ? fput+0x2a/0x50 [ 2416.978643][T28495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.984583][T28495] do_syscall_64+0x2d/0x70 [ 2416.989115][T28495] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2416.995046][T28495] RIP: 0033:0x45e149 [ 2416.998972][T28495] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2417.018900][T28495] RSP: 002b:00007f6b51de8be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2417.027356][T28495] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2417.035362][T28495] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 08:05:45 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x15a0000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:45 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2417.043563][T28495] RBP: 00007f6b51de8ca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2417.051564][T28495] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2417.059757][T28495] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:05:45 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa902, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:45 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x2000000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:45 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x2, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:46 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 08:05:46 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x7, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:46 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x7000000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:46 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa903, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:47 executing program 0: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:05:47 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:47 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa904, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:47 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x8000000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:47 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x8, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:47 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:47 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x700, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:47 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x20000000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:48 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 08:05:48 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa905, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:48 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:48 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x21000000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:49 executing program 0: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:05:49 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x1000000, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:49 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:49 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x7e000000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:49 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa906, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:49 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0xff600000, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:49 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xa907, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:49 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:50 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaa00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:50 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0xffffffff, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:50 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x2000000, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:50 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x700}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:51 executing program 0 (fault-call:1 fault-nth:0): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:05:51 executing program 1: syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 08:05:51 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x7000000, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:51 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:51 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x20000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:51 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaa01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:51 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x8000000, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:51 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:51 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x80000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:51 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaa02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2423.255077][T28662] FAULT_INJECTION: forcing a failure. [ 2423.255077][T28662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2423.323584][T28662] CPU: 1 PID: 28662 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2423.332062][T28662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2423.342158][T28662] Call Trace: [ 2423.345490][T28662] dump_stack+0x107/0x163 [ 2423.349850][T28662] should_fail.cold+0x5/0x1f [ 2423.354472][T28662] _copy_from_user+0x2c/0x180 [ 2423.359177][T28662] io_uring_setup+0xa3/0x38b0 [ 2423.363879][T28662] ? ksys_write+0x12d/0x250 [ 2423.368442][T28662] ? io_link_timeout_fn+0x480/0x480 [ 2423.373667][T28662] ? wait_for_completion_io+0x260/0x260 [ 2423.379241][T28662] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2423.385509][T28662] ? vfs_write+0x18e/0xa80 [ 2423.389950][T28662] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2423.396245][T28662] ? fput+0x2a/0x50 [ 2423.400082][T28662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2423.406014][T28662] do_syscall_64+0x2d/0x70 [ 2423.410542][T28662] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2423.416469][T28662] RIP: 0033:0x45e149 [ 2423.420478][T28662] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2423.440109][T28662] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2423.448544][T28662] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2423.456533][T28662] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2423.464544][T28662] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 08:05:51 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaa03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:51 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x14, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2423.472532][T28662] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2423.480525][T28662] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:05:53 executing program 0 (fault-call:1 fault-nth:1): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:05:53 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:53 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:53 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:53 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaa04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:53 executing program 1 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:53 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:53 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaa05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2425.160733][T28697] FAULT_INJECTION: forcing a failure. [ 2425.160733][T28697] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:05:53 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2425.235521][T28700] FAULT_INJECTION: forcing a failure. [ 2425.235521][T28700] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.245094][T28697] CPU: 1 PID: 28697 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 2425.257057][T28697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2425.267137][T28697] Call Trace: [ 2425.270431][T28697] dump_stack+0x107/0x163 [ 2425.274820][T28697] should_fail.cold+0x5/0x1f [ 2425.279436][T28697] _copy_from_user+0x2c/0x180 [ 2425.284132][T28697] io_uring_setup+0xa3/0x38b0 [ 2425.288833][T28697] ? ksys_write+0x12d/0x250 [ 2425.293368][T28697] ? io_link_timeout_fn+0x480/0x480 [ 2425.298592][T28697] ? wait_for_completion_io+0x260/0x260 [ 2425.304154][T28697] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2425.310450][T28697] ? vfs_write+0x18e/0xa80 [ 2425.314894][T28697] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2425.321172][T28697] ? fput+0x2a/0x50 [ 2425.325086][T28697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.331013][T28697] do_syscall_64+0x2d/0x70 [ 2425.335452][T28697] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2425.341384][T28697] RIP: 0033:0x45e149 [ 2425.345285][T28697] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2425.365002][T28697] RSP: 002b:00007fe9195ecbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2425.373426][T28697] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 08:05:53 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x2000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2425.381438][T28697] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2425.389422][T28697] RBP: 00007fe9195ecca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2425.397486][T28697] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2425.405472][T28697] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 [ 2425.437709][T28700] CPU: 1 PID: 28700 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2425.446173][T28700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2425.456248][T28700] Call Trace: [ 2425.459541][T28700] dump_stack+0x107/0x163 [ 2425.463905][T28700] should_fail.cold+0x5/0x1f [ 2425.468554][T28700] should_failslab+0x5/0x10 [ 2425.473189][T28700] kmem_cache_alloc_trace+0x57/0x300 [ 2425.478503][T28700] io_uring_setup+0x51a/0x38b0 [ 2425.483560][T28700] ? ksys_write+0x12d/0x250 [ 2425.488069][T28700] ? io_link_timeout_fn+0x480/0x480 [ 2425.493278][T28700] ? wait_for_completion_io+0x260/0x260 [ 2425.498840][T28700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.504752][T28700] do_syscall_64+0x2d/0x70 [ 2425.509168][T28700] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2425.515065][T28700] RIP: 0033:0x45e149 [ 2425.518953][T28700] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2425.538559][T28700] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2425.546974][T28700] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2425.554938][T28700] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2425.563007][T28700] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2425.571508][T28700] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2425.579473][T28700] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:05:53 executing program 1 (fault-call:0 fault-nth:1): syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:53 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2425.862387][T28717] FAULT_INJECTION: forcing a failure. [ 2425.862387][T28717] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.906327][T28717] CPU: 0 PID: 28717 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 2425.914811][T28717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2425.924885][T28717] Call Trace: [ 2425.928185][T28717] dump_stack+0x107/0x163 [ 2425.932551][T28717] should_fail.cold+0x5/0x1f [ 2425.937176][T28717] should_failslab+0x5/0x10 [ 2425.941707][T28717] kmem_cache_alloc_trace+0x57/0x300 [ 2425.947334][T28717] io_uring_setup+0x51a/0x38b0 [ 2425.952127][T28717] ? ksys_write+0x12d/0x250 [ 2425.956663][T28717] ? io_link_timeout_fn+0x480/0x480 [ 2425.962520][T28717] ? wait_for_completion_io+0x260/0x260 [ 2425.968118][T28717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.974601][T28717] do_syscall_64+0x2d/0x70 [ 2425.979044][T28717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2425.984965][T28717] RIP: 0033:0x45e149 [ 2425.988896][T28717] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2426.009187][T28717] RSP: 002b:00007fe9195ecbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2426.018409][T28717] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2426.026490][T28717] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2426.034489][T28717] RBP: 00007fe9195ecca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2426.042476][T28717] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2426.050494][T28717] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:05:55 executing program 0 (fault-call:1 fault-nth:2): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:05:55 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x21}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:55 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaa06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:55 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x7000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:55 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:55 executing program 1 (fault-call:0 fault-nth:2): syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2427.038887][T28736] FAULT_INJECTION: forcing a failure. [ 2427.038887][T28736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2427.052188][T28736] CPU: 0 PID: 28736 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 2427.060639][T28736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2427.070718][T28736] Call Trace: [ 2427.074014][T28736] dump_stack+0x107/0x163 [ 2427.079541][T28736] should_fail.cold+0x5/0x1f 08:05:55 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x8000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:55 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2427.084245][T28736] ? avc_has_extended_perms+0xf50/0xf50 [ 2427.089819][T28736] __alloc_pages_nodemask+0x189/0x740 [ 2427.095261][T28736] ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260 [ 2427.102185][T28736] ? find_held_lock+0x2d/0x110 [ 2427.106983][T28736] cache_grow_begin+0x71/0x430 [ 2427.111784][T28736] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 2427.119534][T28736] cache_alloc_refill+0x27f/0x380 [ 2427.124600][T28736] kmem_cache_alloc_trace+0x29b/0x300 [ 2427.130026][T28736] io_uring_setup+0x51a/0x38b0 [ 2427.134849][T28736] ? ksys_write+0x12d/0x250 [ 2427.142168][T28736] ? io_link_timeout_fn+0x480/0x480 [ 2427.147403][T28736] ? wait_for_completion_io+0x260/0x260 [ 2427.153003][T28736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2427.158935][T28736] do_syscall_64+0x2d/0x70 [ 2427.163374][T28736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2427.169296][T28736] RIP: 0033:0x45e149 [ 2427.173209][T28736] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2427.193250][T28736] RSP: 002b:00007fe9195ecbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2427.201727][T28736] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2427.209848][T28736] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2427.217837][T28736] RBP: 00007fe9195ecca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2427.225826][T28736] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2427.233818][T28736] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:05:55 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x7e}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:55 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaa07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2427.311527][T28744] FAULT_INJECTION: forcing a failure. [ 2427.311527][T28744] name failslab, interval 1, probability 0, space 0, times 0 [ 2427.371614][T28744] CPU: 0 PID: 28744 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2427.380274][T28744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2427.390379][T28744] Call Trace: [ 2427.393676][T28744] dump_stack+0x107/0x163 [ 2427.398190][T28744] should_fail.cold+0x5/0x1f [ 2427.402815][T28744] should_failslab+0x5/0x10 [ 2427.407347][T28744] kmem_cache_alloc+0x54/0x3d0 [ 2427.412172][T28744] io_uring_setup+0x53c/0x38b0 [ 2427.416978][T28744] ? ksys_write+0x12d/0x250 08:05:55 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x700}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2427.421848][T28744] ? io_link_timeout_fn+0x480/0x480 [ 2427.428176][T28744] ? wait_for_completion_io+0x260/0x260 [ 2427.434305][T28744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2427.440239][T28744] do_syscall_64+0x2d/0x70 [ 2427.444681][T28744] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2427.450604][T28744] RIP: 0033:0x45e149 [ 2427.454549][T28744] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2427.474266][T28744] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2427.482704][T28744] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2427.490698][T28744] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2427.498850][T28744] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2427.506841][T28744] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 08:05:55 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xab00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2427.514946][T28744] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:05:56 executing program 0 (fault-call:1 fault-nth:3): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:05:56 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x700}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:56 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:56 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x1000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:56 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xab01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:56 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:56 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:56 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x1a01}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:56 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:56 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xab02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2428.711412][T28786] FAULT_INJECTION: forcing a failure. [ 2428.711412][T28786] name failslab, interval 1, probability 0, space 0, times 0 08:05:56 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2428.818430][T28786] CPU: 0 PID: 28786 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2428.826952][T28786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2428.837126][T28786] Call Trace: [ 2428.840453][T28786] dump_stack+0x107/0x163 [ 2428.844841][T28786] should_fail.cold+0x5/0x1f [ 2428.849460][T28786] ? io_uring_setup+0x602/0x38b0 [ 2428.854422][T28786] should_failslab+0x5/0x10 [ 2428.858972][T28786] __kmalloc+0x79/0x340 [ 2428.863159][T28786] ? kmem_cache_alloc+0x343/0x3d0 08:05:56 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2428.868396][T28786] io_uring_setup+0x602/0x38b0 [ 2428.873194][T28786] ? io_link_timeout_fn+0x480/0x480 [ 2428.878447][T28786] ? wait_for_completion_io+0x260/0x260 [ 2428.884039][T28786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2428.889968][T28786] do_syscall_64+0x2d/0x70 [ 2428.894413][T28786] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2428.900453][T28786] RIP: 0033:0x45e149 [ 2428.904370][T28786] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2428.924029][T28786] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2428.932491][T28786] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2428.940607][T28786] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2428.948596][T28786] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2428.959994][T28786] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2428.968012][T28786] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:05:58 executing program 0 (fault-call:1 fault-nth:4): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:05:58 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:58 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xab03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:58 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:58 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x7000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:58 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x2, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:58 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x700}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:58 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xab04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:58 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x5a01}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:58 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x8000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2430.328727][T28838] FAULT_INJECTION: forcing a failure. [ 2430.328727][T28838] name failslab, interval 1, probability 0, space 0, times 0 08:05:58 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x20000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:58 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x3, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2430.432961][T28838] CPU: 0 PID: 28838 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2430.441449][T28838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.451724][T28838] Call Trace: [ 2430.455019][T28838] dump_stack+0x107/0x163 [ 2430.459546][T28838] should_fail.cold+0x5/0x1f [ 2430.464162][T28838] should_failslab+0x5/0x10 [ 2430.468684][T28838] kmem_cache_alloc_trace+0x57/0x300 [ 2430.474001][T28838] ? __io_openat_prep+0x390/0x390 [ 2430.479059][T28838] percpu_ref_init+0xd2/0x3a0 [ 2430.483774][T28838] io_uring_setup+0x6ac/0x38b0 [ 2430.488575][T28838] ? io_link_timeout_fn+0x480/0x480 [ 2430.493804][T28838] ? wait_for_completion_io+0x260/0x260 [ 2430.499425][T28838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2430.505356][T28838] do_syscall_64+0x2d/0x70 [ 2430.509800][T28838] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2430.515724][T28838] RIP: 0033:0x45e149 [ 2430.519634][T28838] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2430.539290][T28838] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2430.547764][T28838] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2430.555761][T28838] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2430.563744][T28838] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2430.571729][T28838] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2430.579713][T28838] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:05:59 executing program 0 (fault-call:1 fault-nth:5): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:05:59 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:05:59 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x60ff}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:05:59 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xab05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:05:59 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x80000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:59 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x4, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:59 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:05:59 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) [ 2431.897267][T28897] FAULT_INJECTION: forcing a failure. [ 2431.897267][T28897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:06:00 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x7e00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:00 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xab06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2432.003517][T28897] CPU: 1 PID: 28897 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2432.012002][T28897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.022083][T28897] Call Trace: [ 2432.025384][T28897] dump_stack+0x107/0x163 [ 2432.029757][T28897] should_fail.cold+0x5/0x1f [ 2432.034382][T28897] __alloc_pages_nodemask+0x189/0x740 [ 2432.039791][T28897] ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260 [ 2432.046590][T28897] ? io_uring_setup+0x12e4/0x38b0 [ 2432.051657][T28897] ? lock_downgrade+0x6d0/0x6d0 [ 2432.056540][T28897] alloc_pages_current+0x18c/0x2a0 [ 2432.061678][T28897] __get_free_pages+0x8/0x40 [ 2432.066401][T28897] io_uring_setup+0x1515/0x38b0 [ 2432.071289][T28897] ? io_link_timeout_fn+0x480/0x480 [ 2432.076513][T28897] ? wait_for_completion_io+0x260/0x260 [ 2432.082106][T28897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2432.088035][T28897] do_syscall_64+0x2d/0x70 [ 2432.092480][T28897] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2432.098441][T28897] RIP: 0033:0x45e149 [ 2432.102351][T28897] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2432.122069][T28897] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2432.130533][T28897] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2432.138606][T28897] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 08:06:00 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x2000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2432.146601][T28897] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2432.154589][T28897] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2432.162573][T28897] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:00 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x5, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:01 executing program 0 (fault-call:1 fault-nth:6): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:01 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xab07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:01 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x7000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:01 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x20000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:01 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x7]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:01 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x6, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:01 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x8]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:01 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x107500}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:01 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xac00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:01 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x8000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2433.605719][T28963] FAULT_INJECTION: forcing a failure. [ 2433.605719][T28963] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:06:01 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x7, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2433.687790][T28963] CPU: 1 PID: 28963 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2433.696459][T28963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2433.706521][T28963] Call Trace: [ 2433.709814][T28963] dump_stack+0x107/0x163 [ 2433.714161][T28963] should_fail.cold+0x5/0x1f [ 2433.719282][T28963] __alloc_pages_nodemask+0x189/0x740 [ 2433.724680][T28963] ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260 [ 2433.731457][T28963] ? io_uring_setup+0x12e4/0x38b0 [ 2433.736484][T28963] ? lock_downgrade+0x6d0/0x6d0 [ 2433.742207][T28963] alloc_pages_current+0x18c/0x2a0 [ 2433.747318][T28963] __get_free_pages+0x8/0x40 [ 2433.751916][T28963] io_uring_setup+0x16cb/0x38b0 [ 2433.756776][T28963] ? io_link_timeout_fn+0x480/0x480 [ 2433.761988][T28963] ? wait_for_completion_io+0x260/0x260 [ 2433.767559][T28963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.773659][T28963] do_syscall_64+0x2d/0x70 [ 2433.778095][T28963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2433.783987][T28963] RIP: 0033:0x45e149 [ 2433.787878][T28963] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2433.807499][T28963] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2433.815912][T28963] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2433.823882][T28963] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2433.831852][T28963] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2433.839817][T28963] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2433.847797][T28963] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:01 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x700]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:03 executing program 0 (fault-call:1 fault-nth:7): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:03 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x1000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:03 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xac01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:03 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x8, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:03 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x400000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:03 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:03 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x2000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:03 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x549000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:03 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xac02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:03 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:03 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0xc, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2435.342771][T29023] FAULT_INJECTION: forcing a failure. [ 2435.342771][T29023] name failslab, interval 1, probability 0, space 0, times 0 [ 2435.432686][T29023] CPU: 0 PID: 29023 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2435.441279][T29023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2435.451356][T29023] Call Trace: [ 2435.454649][T29023] dump_stack+0x107/0x163 [ 2435.459011][T29023] should_fail.cold+0x5/0x1f [ 2435.463635][T29023] should_failslab+0x5/0x10 [ 2435.468196][T29023] kmem_cache_alloc_trace+0x57/0x300 [ 2435.473624][T29023] ? io_uring_setup+0x12e4/0x38b0 [ 2435.478680][T29023] io_wq_create+0xb4/0xa60 [ 2435.483126][T29023] ? alloc_pages_current+0x194/0x2a0 [ 2435.488454][T29023] io_uring_setup+0x2b81/0x38b0 [ 2435.493346][T29023] ? io_link_timeout_fn+0x480/0x480 [ 2435.498569][T29023] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2435.504396][T29023] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2435.510050][T29023] ? wait_for_completion_io+0x260/0x260 [ 2435.515642][T29023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2435.521565][T29023] do_syscall_64+0x2d/0x70 [ 2435.526003][T29023] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2435.531926][T29023] RIP: 0033:0x45e149 [ 2435.535836][T29023] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2435.555471][T29023] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2435.563911][T29023] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2435.571901][T29023] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 08:06:03 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x7]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:03 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x748000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2435.579918][T29023] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2435.587905][T29023] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2435.595891][T29023] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:04 executing program 0 (fault-call:1 fault-nth:8): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:04 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x7000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:04 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xac03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:04 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x8]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:04 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x751000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:04 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x10, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:04 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x700]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:04 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x807400}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:05 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x8000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:05 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xac04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2436.950590][T29096] FAULT_INJECTION: forcing a failure. [ 2436.950590][T29096] name failslab, interval 1, probability 0, space 0, times 0 [ 2437.059474][T29096] CPU: 0 PID: 29096 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2437.067984][T29096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2437.078185][T29096] Call Trace: [ 2437.081486][T29096] dump_stack+0x107/0x163 [ 2437.085962][T29096] should_fail.cold+0x5/0x1f [ 2437.090588][T29096] ? io_wq_create+0x107/0xa60 [ 2437.095331][T29096] should_failslab+0x5/0x10 [ 2437.099880][T29096] __kmalloc+0x79/0x340 [ 2437.104075][T29096] io_wq_create+0x107/0xa60 [ 2437.108631][T29096] ? alloc_pages_current+0x194/0x2a0 [ 2437.113945][T29096] io_uring_setup+0x2b81/0x38b0 [ 2437.118826][T29096] ? io_link_timeout_fn+0x480/0x480 [ 2437.124048][T29096] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2437.129877][T29096] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2437.135814][T29096] ? wait_for_completion_io+0x260/0x260 [ 2437.141752][T29096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2437.147685][T29096] do_syscall_64+0x2d/0x70 [ 2437.152146][T29096] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2437.158092][T29096] RIP: 0033:0x45e149 [ 2437.162004][T29096] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2437.181756][T29096] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2437.190224][T29096] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2437.198339][T29096] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 08:06:05 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x12, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:05 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x20000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2437.206330][T29096] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2437.214322][T29096] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2437.223811][T29096] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:06 executing program 0 (fault-call:1 fault-nth:9): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:06 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:06 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xac05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:06 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x905400}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:06 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x80000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:06 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x18, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:06 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:06 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x1000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:06 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:06 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xac06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2438.633944][T29153] FAULT_INJECTION: forcing a failure. [ 2438.633944][T29153] name failslab, interval 1, probability 0, space 0, times 0 [ 2438.706946][T29153] CPU: 0 PID: 29153 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2438.715426][T29153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2438.725502][T29153] Call Trace: [ 2438.728797][T29153] dump_stack+0x107/0x163 [ 2438.733164][T29153] should_fail.cold+0x5/0x1f [ 2438.737790][T29153] should_failslab+0x5/0x10 [ 2438.742316][T29153] kmem_cache_alloc_node_trace+0x69/0x430 [ 2438.748080][T29153] io_wq_create+0x5b3/0xa60 [ 2438.752619][T29153] io_uring_setup+0x2b81/0x38b0 [ 2438.757508][T29153] ? io_link_timeout_fn+0x480/0x480 [ 2438.763110][T29153] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2438.768952][T29153] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2438.774609][T29153] ? wait_for_completion_io+0x260/0x260 [ 2438.780201][T29153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2438.786132][T29153] do_syscall_64+0x2d/0x70 [ 2438.790571][T29153] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2438.796494][T29153] RIP: 0033:0x45e149 [ 2438.800433][T29153] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2438.820063][T29153] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2438.828500][T29153] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2438.836514][T29153] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2438.844502][T29153] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2438.852567][T29153] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2438.864465][T29153] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:06 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x1c, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:07 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:08 executing program 0 (fault-call:1 fault-nth:10): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:08 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xac07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:08 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x11a0000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:08 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x7]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:08 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x1d, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:08 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x7000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:08 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x15a0000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:08 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x8000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:08 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xad00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:08 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x8]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:08 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x1e, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2440.253642][T29210] FAULT_INJECTION: forcing a failure. [ 2440.253642][T29210] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.350827][T29210] CPU: 1 PID: 29210 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2440.359312][T29210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2440.369478][T29210] Call Trace: [ 2440.372777][T29210] dump_stack+0x107/0x163 [ 2440.377512][T29210] should_fail.cold+0x5/0x1f [ 2440.382134][T29210] should_failslab+0x5/0x10 [ 2440.387185][T29210] kmem_cache_alloc_node_trace+0x69/0x430 [ 2440.392965][T29210] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 08:06:08 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2440.399242][T29210] ? _find_next_bit.constprop.0+0x1a0/0x200 [ 2440.405173][T29210] io_wq_create+0x5b3/0xa60 [ 2440.409714][T29210] io_uring_setup+0x2b81/0x38b0 [ 2440.414600][T29210] ? io_link_timeout_fn+0x480/0x480 [ 2440.419827][T29210] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2440.425659][T29210] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2440.431326][T29210] ? wait_for_completion_io+0x260/0x260 [ 2440.436946][T29210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.442888][T29210] do_syscall_64+0x2d/0x70 [ 2440.447329][T29210] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2440.453359][T29210] RIP: 0033:0x45e149 [ 2440.457275][T29210] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2440.477092][T29210] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2440.485537][T29210] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2440.493536][T29210] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2440.501524][T29210] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2440.509514][T29210] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2440.517503][T29210] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:09 executing program 0 (fault-call:1 fault-nth:11): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:09 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x700]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:09 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xad01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:09 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x7000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:09 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:09 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x24, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:09 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xad02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:09 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:09 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:09 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x8000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2441.879394][T29262] FAULT_INJECTION: forcing a failure. [ 2441.879394][T29262] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.963069][T29262] CPU: 0 PID: 29262 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2441.971723][T29262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2441.982063][T29262] Call Trace: [ 2441.985365][T29262] dump_stack+0x107/0x163 [ 2441.989760][T29262] should_fail.cold+0x5/0x1f [ 2441.994385][T29262] should_failslab+0x5/0x10 [ 2441.999205][T29262] kmem_cache_alloc_trace+0x57/0x300 [ 2442.004526][T29262] ? __raw_spin_lock_init+0x34/0x100 [ 2442.009849][T29262] ? io_wq_for_each_worker.isra.0+0x370/0x370 [ 2442.015946][T29262] __kthread_create_on_node+0xd2/0x410 [ 2442.021457][T29262] ? __kthread_parkme+0x1e0/0x1e0 [ 2442.026630][T29262] ? ____cache_alloc_node+0xf5/0x1d0 [ 2442.032058][T29262] ? lock_downgrade+0x6d0/0x6d0 [ 2442.036944][T29262] ? do_raw_spin_lock+0x120/0x2b0 [ 2442.042194][T29262] ? rwlock_bug.part.0+0x90/0x90 [ 2442.047185][T29262] ? io_wq_for_each_worker.isra.0+0x370/0x370 [ 2442.053372][T29262] kthread_create_on_node+0xbb/0xf0 [ 2442.058683][T29262] ? __kthread_create_on_node+0x410/0x410 [ 2442.064438][T29262] ? lockdep_init_map_waits+0x26a/0x720 [ 2442.070123][T29262] ? lockdep_init_map_waits+0x26a/0x720 [ 2442.075730][T29262] ? __raw_spin_lock_init+0x34/0x100 [ 2442.081062][T29262] io_wq_create+0x76a/0xa60 [ 2442.085632][T29262] io_uring_setup+0x2b81/0x38b0 [ 2442.090608][T29262] ? io_link_timeout_fn+0x480/0x480 [ 2442.095848][T29262] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2442.102895][T29262] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2442.108578][T29262] ? wait_for_completion_io+0x260/0x260 [ 2442.114166][T29262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2442.120096][T29262] do_syscall_64+0x2d/0x70 [ 2442.126378][T29262] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2442.132396][T29262] RIP: 0033:0x45e149 [ 2442.136311][T29262] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:06:10 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:10 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x2a, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2442.156900][T29262] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2442.165365][T29262] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2442.173357][T29262] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2442.182425][T29262] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2442.190567][T29262] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2442.198578][T29262] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:11 executing program 0 (fault-call:1 fault-nth:12): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:11 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x7]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:11 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xad03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:11 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x7000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:11 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x20000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:11 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x30, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:11 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x21000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:11 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x8000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:11 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x8]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:11 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xad04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2443.630948][T29324] FAULT_INJECTION: forcing a failure. [ 2443.630948][T29324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2443.648958][T29324] CPU: 1 PID: 29324 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2443.658499][T29324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2443.668674][T29324] Call Trace: [ 2443.671974][T29324] dump_stack+0x107/0x163 [ 2443.676332][T29324] should_fail.cold+0x5/0x1f [ 2443.680948][T29324] _copy_to_user+0x2c/0x150 [ 2443.685475][T29324] io_uring_setup+0x1bb8/0x38b0 [ 2443.690358][T29324] ? io_link_timeout_fn+0x480/0x480 [ 2443.695593][T29324] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2443.701423][T29324] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2443.707076][T29324] ? wait_for_completion_io+0x260/0x260 [ 2443.712663][T29324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.718597][T29324] do_syscall_64+0x2d/0x70 [ 2443.723033][T29324] entry_SYSCALL_64_after_hwframe+0x44/0xa9 08:06:11 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x36, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2443.728948][T29324] RIP: 0033:0x45e149 [ 2443.732853][T29324] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2443.752478][T29324] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2443.760910][T29324] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2443.768891][T29324] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2443.776877][T29324] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2443.784949][T29324] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2443.792938][T29324] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:11 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:13 executing program 0 (fault-call:1 fault-nth:13): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:13 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x700]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:13 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xad05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:13 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x7e000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:13 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x3c, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:13 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:13 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0xff600000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:13 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xad06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:13 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x20000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:13 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x7]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:13 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0xffffffff}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2445.302394][T29385] FAULT_INJECTION: forcing a failure. [ 2445.302394][T29385] name failslab, interval 1, probability 0, space 0, times 0 08:06:13 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x42, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2445.391539][T29385] CPU: 0 PID: 29385 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2445.400020][T29385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2445.410092][T29385] Call Trace: [ 2445.413384][T29385] dump_stack+0x107/0x163 [ 2445.417777][T29385] should_fail.cold+0x5/0x1f [ 2445.422392][T29385] should_failslab+0x5/0x10 [ 2445.427027][T29385] kmem_cache_alloc+0x54/0x3d0 [ 2445.431828][T29385] ? selinux_mmap_file+0x230/0x230 [ 2445.436969][T29385] ? sock_free_inode+0x20/0x20 [ 2445.441929][T29385] sock_alloc_inode+0x18/0x1c0 [ 2445.446713][T29385] ? sock_free_inode+0x20/0x20 [ 2445.451498][T29385] alloc_inode+0x61/0x230 [ 2445.455849][T29385] new_inode_pseudo+0x14/0xe0 [ 2445.460550][T29385] sock_alloc+0x3c/0x300 [ 2445.464809][T29385] __sock_create+0xb9/0x820 [ 2445.469340][T29385] io_uring_setup+0x1bf5/0x38b0 [ 2445.474220][T29385] ? io_link_timeout_fn+0x480/0x480 [ 2445.479443][T29385] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2445.485268][T29385] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2445.490923][T29385] ? wait_for_completion_io+0x260/0x260 [ 2445.496509][T29385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2445.502427][T29385] do_syscall_64+0x2d/0x70 [ 2445.506854][T29385] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2445.512766][T29385] RIP: 0033:0x45e149 [ 2445.516669][T29385] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2445.536292][T29385] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2445.545758][T29385] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2445.553738][T29385] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2445.561723][T29385] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2445.569702][T29385] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2445.577684][T29385] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 [ 2446.064274][T29385] socket: no more sockets 08:06:14 executing program 0 (fault-call:1 fault-nth:14): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:14 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:14 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xad07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:14 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x80000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:14 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x8]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:14 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x60, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:15 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x700]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:15 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:15 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:15 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xae00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:15 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x121, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2446.998306][T29447] FAULT_INJECTION: forcing a failure. [ 2446.998306][T29447] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.059394][T29447] CPU: 0 PID: 29447 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2447.067873][T29447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.077950][T29447] Call Trace: [ 2447.081245][T29447] dump_stack+0x107/0x163 [ 2447.085602][T29447] should_fail.cold+0x5/0x1f [ 2447.090217][T29447] should_failslab+0x5/0x10 [ 2447.094744][T29447] kmem_cache_alloc+0x54/0x3d0 [ 2447.099541][T29447] security_inode_alloc+0x34/0x160 [ 2447.104684][T29447] inode_init_always+0x5a9/0xdb0 [ 2447.109642][T29447] ? __init_waitqueue_head+0x97/0x110 [ 2447.115041][T29447] alloc_inode+0x82/0x230 [ 2447.119397][T29447] new_inode_pseudo+0x14/0xe0 [ 2447.124108][T29447] sock_alloc+0x3c/0x300 [ 2447.128378][T29447] __sock_create+0xb9/0x820 [ 2447.132919][T29447] io_uring_setup+0x1bf5/0x38b0 [ 2447.137800][T29447] ? io_link_timeout_fn+0x480/0x480 [ 2447.143194][T29447] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2447.149126][T29447] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2447.154888][T29447] ? wait_for_completion_io+0x260/0x260 [ 2447.160478][T29447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.166398][T29447] do_syscall_64+0x2d/0x70 [ 2447.170838][T29447] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2447.176755][T29447] RIP: 0033:0x45e149 [ 2447.180663][T29447] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2447.200291][T29447] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2447.208723][T29447] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2447.216700][T29447] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2447.224683][T29447] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2447.232668][T29447] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2447.240655][T29447] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 [ 2447.270995][T29447] socket: no more sockets 08:06:15 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:16 executing program 0 (fault-call:1 fault-nth:15): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:16 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:16 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xae01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:16 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:16 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x300, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:16 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:16 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:16 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x21}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:16 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x7000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:16 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xae02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2448.672901][T29508] FAULT_INJECTION: forcing a failure. [ 2448.672901][T29508] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.704352][T29508] CPU: 0 PID: 29508 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2448.712816][T29508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2448.722886][T29508] Call Trace: [ 2448.726179][T29508] dump_stack+0x107/0x163 [ 2448.730540][T29508] should_fail.cold+0x5/0x1f [ 2448.735157][T29508] should_failslab+0x5/0x10 [ 2448.739682][T29508] kmem_cache_alloc+0x54/0x3d0 [ 2448.744481][T29508] sk_prot_alloc+0x5f/0x2d0 [ 2448.749009][T29508] sk_alloc+0x32/0xc60 [ 2448.753104][T29508] unix_create1+0xbb/0x570 [ 2448.757545][T29508] unix_create+0xf9/0x1e0 [ 2448.761904][T29508] __sock_create+0x487/0x820 [ 2448.766644][T29508] io_uring_setup+0x1bf5/0x38b0 [ 2448.771533][T29508] ? io_link_timeout_fn+0x480/0x480 [ 2448.776750][T29508] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2448.782576][T29508] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2448.788229][T29508] ? wait_for_completion_io+0x260/0x260 [ 2448.793822][T29508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.799746][T29508] do_syscall_64+0x2d/0x70 [ 2448.804183][T29508] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2448.810104][T29508] RIP: 0033:0x45e149 [ 2448.814013][T29508] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2448.833638][T29508] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2448.842070][T29508] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2448.850059][T29508] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2448.858739][T29508] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 08:06:16 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x500, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2448.866722][T29508] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2448.874702][T29508] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:17 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x8000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:18 executing program 0 (fault-call:1 fault-nth:16): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:18 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x7e}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:18 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x7000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:18 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xae03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:18 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:18 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x600, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:18 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x700}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:18 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x8000000]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 08:06:18 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:18 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xae04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:18 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x700, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2450.317199][T29573] FAULT_INJECTION: forcing a failure. [ 2450.317199][T29573] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.391458][T29573] CPU: 0 PID: 29573 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2450.399928][T29573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.410012][T29573] Call Trace: [ 2450.413304][T29573] dump_stack+0x107/0x163 [ 2450.417670][T29573] should_fail.cold+0x5/0x1f [ 2450.422288][T29573] should_failslab+0x5/0x10 [ 2450.426814][T29573] kmem_cache_alloc_trace+0x57/0x300 [ 2450.432139][T29573] selinux_sk_alloc_security+0x83/0x1c0 [ 2450.437712][T29573] security_sk_alloc+0x50/0xb0 [ 2450.442500][T29573] sk_prot_alloc+0xa9/0x2d0 [ 2450.447026][T29573] sk_alloc+0x32/0xc60 [ 2450.451118][T29573] unix_create1+0xbb/0x570 [ 2450.455558][T29573] unix_create+0xf9/0x1e0 [ 2450.459918][T29573] __sock_create+0x487/0x820 [ 2450.464543][T29573] io_uring_setup+0x1bf5/0x38b0 [ 2450.469447][T29573] ? io_link_timeout_fn+0x480/0x480 [ 2450.474669][T29573] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2450.480499][T29573] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2450.486154][T29573] ? wait_for_completion_io+0x260/0x260 08:06:18 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x1a01}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2450.491747][T29573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2450.497674][T29573] do_syscall_64+0x2d/0x70 [ 2450.502110][T29573] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2450.508030][T29573] RIP: 0033:0x45e149 [ 2450.511943][T29573] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2450.531655][T29573] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2450.540096][T29573] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2450.548081][T29573] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2450.556066][T29573] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2450.564052][T29573] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2450.572037][T29573] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:19 executing program 0 (fault-call:1 fault-nth:17): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:19 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x7]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:19 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r1, 0x30}) 08:06:19 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x4000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:19 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xae05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:19 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0xc00, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:19 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x8]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:19 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x1200, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:20 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x5a01}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:20 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) socket$inet_udp(0x2, 0x2, 0x0) 08:06:20 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xae06, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:20 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x700]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2451.995778][T29640] FAULT_INJECTION: forcing a failure. [ 2451.995778][T29640] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.038175][T29640] CPU: 1 PID: 29640 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2452.046640][T29640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2452.056707][T29640] Call Trace: [ 2452.059986][T29640] dump_stack+0x107/0x163 [ 2452.064323][T29640] should_fail.cold+0x5/0x1f [ 2452.068911][T29640] should_failslab+0x5/0x10 [ 2452.073420][T29640] kmem_cache_alloc+0x54/0x3d0 [ 2452.078192][T29640] __d_alloc+0x2a/0x950 [ 2452.082353][T29640] d_alloc_pseudo+0x19/0x70 [ 2452.086851][T29640] alloc_file_pseudo+0xc6/0x250 [ 2452.091722][T29640] ? rwlock_bug.part.0+0x90/0x90 [ 2452.096664][T29640] ? alloc_file+0x5d0/0x5d0 [ 2452.101163][T29640] ? do_raw_spin_unlock+0x171/0x230 [ 2452.106363][T29640] ? _raw_spin_unlock+0x24/0x40 [ 2452.111228][T29640] ? alloc_fd+0x2da/0x650 [ 2452.115553][T29640] anon_inode_getfile+0xc8/0x1f0 [ 2452.120487][T29640] io_uring_setup+0x2815/0x38b0 [ 2452.125343][T29640] ? io_link_timeout_fn+0x480/0x480 [ 2452.130535][T29640] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2452.136334][T29640] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2452.141959][T29640] ? wait_for_completion_io+0x260/0x260 [ 2452.147514][T29640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2452.153410][T29640] do_syscall_64+0x2d/0x70 [ 2452.157993][T29640] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2452.163884][T29640] RIP: 0033:0x45e149 [ 2452.167782][T29640] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2452.187383][T29640] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2452.195791][T29640] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2452.203754][T29640] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2452.211727][T29640] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2452.219688][T29640] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2452.227652][T29640] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:21 executing program 0 (fault-call:1 fault-nth:18): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:21 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xae07, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:21 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000280)) syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 08:06:21 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x60ff}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:21 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x20000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:21 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x1800, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:21 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaf00, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:21 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x0}]}) r2 = getpgrp(0xffffffffffffffff) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x0, 0x0) recvmsg$can_raw(r3, 0x0, 0x0) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) waitid(0x0, r2, &(0x7f0000000180), 0x1, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={r1}) 08:06:21 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x7e00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:21 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x80000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:21 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x1c00, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:21 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaf01, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2453.797747][T29698] FAULT_INJECTION: forcing a failure. [ 2453.797747][T29698] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.856187][T29698] CPU: 0 PID: 29698 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2453.864674][T29698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.874750][T29698] Call Trace: [ 2453.878045][T29698] dump_stack+0x107/0x163 [ 2453.882407][T29698] should_fail.cold+0x5/0x1f [ 2453.887028][T29698] should_failslab+0x5/0x10 [ 2453.891573][T29698] kmem_cache_alloc+0x54/0x3d0 [ 2453.896368][T29698] ? d_instantiate+0x75/0x90 [ 2453.900988][T29698] __alloc_file+0x21/0x280 [ 2453.905433][T29698] alloc_empty_file+0x6d/0x170 [ 2453.910229][T29698] alloc_file+0x93/0x5d0 [ 2453.914503][T29698] alloc_file_pseudo+0x165/0x250 [ 2453.919471][T29698] ? alloc_file+0x5d0/0x5d0 [ 2453.924003][T29698] ? _raw_spin_unlock+0x24/0x40 [ 2453.928878][T29698] ? alloc_fd+0x2da/0x650 [ 2453.933229][T29698] anon_inode_getfile+0xc8/0x1f0 [ 2453.938191][T29698] io_uring_setup+0x2815/0x38b0 [ 2453.943076][T29698] ? io_link_timeout_fn+0x480/0x480 [ 2453.948299][T29698] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2453.954130][T29698] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2453.959831][T29698] ? wait_for_completion_io+0x260/0x260 [ 2453.965422][T29698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2453.971351][T29698] do_syscall_64+0x2d/0x70 [ 2453.975793][T29698] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2453.981714][T29698] RIP: 0033:0x45e149 [ 2453.985624][T29698] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2454.005245][T29698] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2454.013660][T29698] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2454.021626][T29698] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2454.029592][T29698] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2454.037556][T29698] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2454.045521][T29698] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:23 executing program 0 (fault-call:1 fault-nth:19): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:23 executing program 5: syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x600440, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fedbdf2500000000060006004e220000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) 08:06:23 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:23 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x20000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:23 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x1d00, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:23 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaf02, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:23 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:23 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x107500}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:23 executing program 5: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000e4) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) inotify_rm_watch(0xffffffffffffffff, r0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000140)={0x3f, 0x14, [0x4c2, 0x80000000, 0x8293, 0x779, 0x3]}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x22b1, @local, 0x8e0}, 0x1c) syz_io_uring_setup(0x469, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) [ 2455.383039][T29760] FAULT_INJECTION: forcing a failure. [ 2455.383039][T29760] name failslab, interval 1, probability 0, space 0, times 0 08:06:23 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaf03, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 2455.497697][T29760] CPU: 1 PID: 29760 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2455.506187][T29760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.516275][T29760] Call Trace: [ 2455.519576][T29760] dump_stack+0x107/0x163 [ 2455.523942][T29760] should_fail.cold+0x5/0x1f [ 2455.528566][T29760] should_failslab+0x5/0x10 [ 2455.533100][T29760] kmem_cache_alloc+0x54/0x3d0 [ 2455.537905][T29760] security_file_alloc+0x34/0x170 [ 2455.542965][T29760] __alloc_file+0xd8/0x280 [ 2455.547421][T29760] alloc_empty_file+0x6d/0x170 [ 2455.552216][T29760] alloc_file+0x93/0x5d0 [ 2455.556498][T29760] alloc_file_pseudo+0x165/0x250 [ 2455.561469][T29760] ? alloc_file+0x5d0/0x5d0 [ 2455.566008][T29760] ? _raw_spin_unlock+0x24/0x40 [ 2455.570890][T29760] ? alloc_fd+0x2da/0x650 [ 2455.575250][T29760] anon_inode_getfile+0xc8/0x1f0 [ 2455.580223][T29760] io_uring_setup+0x2815/0x38b0 [ 2455.585121][T29760] ? io_link_timeout_fn+0x480/0x480 [ 2455.590346][T29760] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2455.596180][T29760] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2455.601848][T29760] ? wait_for_completion_io+0x260/0x260 [ 2455.607447][T29760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2455.613399][T29760] do_syscall_64+0x2d/0x70 [ 2455.617847][T29760] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2455.623775][T29760] RIP: 0033:0x45e149 [ 2455.627695][T29760] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:06:23 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x7000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:23 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x1e00, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2455.647331][T29760] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2455.655779][T29760] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2455.663774][T29760] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2455.671771][T29760] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2455.679767][T29760] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2455.687760][T29760] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 08:06:24 executing program 0 (fault-call:1 fault-nth:20): syz_io_uring_setup(0x3483, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) mlockall(0x1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcece, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 08:06:24 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x400000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:24 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaf04, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:24 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x8000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:24 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x469, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) syz_io_uring_setup(0xb6, &(0x7f0000000100)={0x0, 0xb1e1, 0x4, 0x3, 0x128, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) 08:06:24 executing program 1: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x2000, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) 08:06:25 executing program 3: sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="d586a8322028ce9c012431109a66c5d27d50ef7ae2fe4dfe80c10c967e82ad3a0e8de1caee9b447dabf1c3be34f696683e52a845d3659ec0eda174e6a52939f09c038c931a0c4436d225b988e988408cdd56e8fe9c8a1a070c0d887a6d80a2a0372fbd3ab6130d9f4081c87034e06fb2f35ac9921f7709ee87affb758eafddd77cb2fd6204b2433e44", 0x89, 0x8001, &(0x7f00000002c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x3c}, 0x6, 0x1}, 0x20) syz_io_uring_setup(0x2ff8, &(0x7f0000000040)={0x0, 0xf5b9, 0xaf05, 0x0, 0x332}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_io_uring_setup(0x6fed, &(0x7f00000015c0)={0x0, 0x0, 0x20, 0x0, 0xe5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000003c0)={{0x4, 0x2, 0x6, 0x5, 'syz1\x00', 0x8}, 0x0, [0x0, 0x0, 0x100000000, 0x3d14331, 0xffffffff, 0x20, 0x4, 0x7fff, 0x7, 0x8, 0x4, 0x8637, 0xffffffff, 0x10001, 0x0, 0x8, 0x9, 0xff, 0xfffffffffffffffe, 0x8, 0x81, 0xeb4e, 0x3f, 0x2, 0x3, 0x60, 0xe472, 0x0, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x9, 0x3ff, 0xff, 0x0, 0x5, 0xfa2, 0x0, 0x2, 0x401, 0x3, 0x8000, 0x5, 0x100, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xda5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1, 0xe5, 0x0, 0x401, 0x0, 0x1000, 0x4ad58d6c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x3f8, 0x10001, 0x0, 0x7, 0x7f, 0x2, 0x6, 0x9c9, 0x0, 0x5, 0x6, 0x8, 0x6, 0x80000001, 0x96de, 0x9, 0x9, 0x20, 0x0, 0x7, 0x20, 0x2, 0x8001, 0x8, 0x1, 0x2, 0x0, 0x1f, 0x20, 0x7, 0xdb2, 0x7ff, 0x80000000, 0x4, 0x2, 0x9, 0xfffffffffffffe01, 0x80, 0x1000, 0x6000000000000000, 0x10001, 0x6, 0x6, 0x5, 0x100, 0x0, 0x0, 0x7, 0x8]}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/14}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 08:06:25 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @mcast1, 0x63}}, 0x24) syz_io_uring_setup(0x469, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x60}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x100, 0x464, 0x300, 0x70bd25, 0x25dfdbfd, "586c100dc0d46af239df1acae3f537986629339cd9cc0cade733ea9aa1debd15a57dba83af102a59124e687865c47efe429b10020cd671593f57de1bcd36a7e959838ae2f0d9847bc26f177b79c2babb13d096cdffce622d1e3d5626fdf8766e58c438ab72eecdc3d41dadc60ae4ec6cb4795562fe0e8a95e02bb99203e820ec0a11ed943a70e45f98c07496e9457f50045150714f8343440caa8868100e29060770cf42a68058aaf0ce01ffefcb46792f1656c8815f66011d82e57f3e6293c11150349da8b8f1cd351a14cfac323e73411e0b4ae3a62ebac7a17b1138876d7cbceb455da61b96579ab2d5aba37a", ["", "", "", "", "", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x42}, 0x24000040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000080)) 08:06:25 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x549000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) 08:06:25 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0x93f0, 0x2a, 0x3, 0x183}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2457.126662][T29821] FAULT_INJECTION: forcing a failure. [ 2457.126662][T29821] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.189643][T29821] CPU: 1 PID: 29821 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2457.198308][T29821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.208394][T29821] Call Trace: [ 2457.211839][T29821] dump_stack+0x107/0x163 [ 2457.216209][T29821] should_fail.cold+0x5/0x1f [ 2457.220840][T29821] should_failslab+0x5/0x10 [ 2457.225379][T29821] kmem_cache_alloc_trace+0x57/0x300 [ 2457.230713][T29821] io_uring_alloc_task_context+0x43/0x2a0 08:06:25 executing program 2: syz_io_uring_setup(0x56c8, &(0x7f00000001c0)={0x0, 0xd430, 0x1, 0x20000, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2457.236469][T29821] io_uring_add_task_file+0x1ed/0x280 [ 2457.242034][T29821] io_uring_setup+0x2889/0x38b0 [ 2457.246931][T29821] ? io_link_timeout_fn+0x480/0x480 [ 2457.252164][T29821] ? __do_sys_io_uring_enter+0x1c50/0x1c50 [ 2457.258162][T29821] ? io_queue_linked_timeout+0x1f0/0x1f0 [ 2457.263831][T29821] ? wait_for_completion_io+0x260/0x260 [ 2457.269555][T29821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.275503][T29821] do_syscall_64+0x2d/0x70 [ 2457.280093][T29821] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2457.286018][T29821] RIP: 0033:0x45e149 [ 2457.290053][T29821] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2457.310065][T29821] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2457.318513][T29821] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 000000000045e149 [ 2457.326662][T29821] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 08:06:25 executing program 4: syz_io_uring_setup(0x468, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x0, 0x748000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0) [ 2457.334774][T29821] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2457.342772][T29821] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2457.350766][T29821] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 [ 2457.887621][T29821] ------------[ cut here ]------------ [ 2457.893869][T29821] percpu_ref_kill_and_confirm called more than once on io_ring_ctx_ref_free! [ 2457.894365][T29821] WARNING: CPU: 0 PID: 29821 at lib/percpu-refcount.c:382 percpu_ref_kill_and_confirm+0x169/0x1d0 [ 2457.913944][T29821] Modules linked in: [ 2457.918093][T29821] CPU: 0 PID: 29821 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2457.926619][T29821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.936697][T29821] RIP: 0010:percpu_ref_kill_and_confirm+0x169/0x1d0 [ 2457.943332][T29821] Code: 5d 08 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 75 68 48 8b 53 08 48 c7 c6 00 ca be 89 48 c7 c7 20 c9 be 89 e8 1b de 09 05 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 [ 2457.963094][T29821] RSP: 0018:ffffc90008967e18 EFLAGS: 00010082 [ 2457.969285][T29821] RAX: 0000000000000000 RBX: ffff88805ee78080 RCX: 0000000000000000 [ 2457.977277][T29821] RDX: 0000000000040000 RSI: ffffffff815b8fd5 RDI: fffff5200112cfb5 [ 2457.985410][T29821] RBP: ffff888033923000 R08: 0000000000000000 R09: 0000000000000000 [ 2457.993406][T29821] R10: ffffffff815b742b R11: 0000000000000000 R12: 0000000000000246 [ 2458.001398][T29821] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88807ff76db8 [ 2458.009393][T29821] FS: 00007f8f0577e700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 2458.018350][T29821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2458.025103][T29821] CR2: 00007f85f60a33f8 CR3: 000000014506b000 CR4: 00000000001506f0 [ 2458.033252][T29821] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2458.041250][T29821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2458.049296][T29821] Call Trace: [ 2458.052598][T29821] io_ring_ctx_wait_and_kill+0x2b/0x450 [ 2458.058161][T29821] io_uring_release+0x3e/0x50 [ 2458.062847][T29821] __fput+0x283/0x920 [ 2458.066839][T29821] ? io_ring_ctx_wait_and_kill+0x450/0x450 [ 2458.072871][T29821] task_work_run+0xdd/0x190 [ 2458.077489][T29821] exit_to_user_mode_prepare+0x1f0/0x200 [ 2458.083139][T29821] syscall_exit_to_user_mode+0x19/0x50 [ 2458.088614][T29821] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2458.094525][T29821] RIP: 0033:0x45e149 [ 2458.098429][T29821] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2458.118217][T29821] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2458.126646][T29821] RAX: fffffffffffffff4 RBX: 00000000200001c0 RCX: 000000000045e149 [ 2458.134621][T29821] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2458.142599][T29821] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2458.150575][T29821] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2458.158779][T29821] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 [ 2458.166775][T29821] Kernel panic - not syncing: panic_on_warn set ... [ 2458.173356][T29821] CPU: 0 PID: 29821 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 2458.181857][T29821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.192034][T29821] Call Trace: [ 2458.195316][T29821] dump_stack+0x107/0x163 [ 2458.199660][T29821] panic+0x343/0x77f [ 2458.203571][T29821] ? __warn_printk+0xf3/0xf3 [ 2458.208181][T29821] ? __warn.cold+0x1a/0x44 [ 2458.212739][T29821] ? percpu_ref_kill_and_confirm+0x169/0x1d0 [ 2458.218732][T29821] __warn.cold+0x35/0x44 [ 2458.222978][T29821] ? wake_up_klogd+0xcb/0x100 [ 2458.227670][T29821] ? percpu_ref_kill_and_confirm+0x169/0x1d0 [ 2458.233816][T29821] report_bug+0x1bd/0x210 [ 2458.238161][T29821] handle_bug+0x3c/0x60 [ 2458.242326][T29821] exc_invalid_op+0x14/0x40 [ 2458.246832][T29821] asm_exc_invalid_op+0x12/0x20 [ 2458.251696][T29821] RIP: 0010:percpu_ref_kill_and_confirm+0x169/0x1d0 [ 2458.258296][T29821] Code: 5d 08 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 75 68 48 8b 53 08 48 c7 c6 00 ca be 89 48 c7 c7 20 c9 be 89 e8 1b de 09 05 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 [ 2458.278156][T29821] RSP: 0018:ffffc90008967e18 EFLAGS: 00010082 [ 2458.284315][T29821] RAX: 0000000000000000 RBX: ffff88805ee78080 RCX: 0000000000000000 [ 2458.292353][T29821] RDX: 0000000000040000 RSI: ffffffff815b8fd5 RDI: fffff5200112cfb5 [ 2458.300343][T29821] RBP: ffff888033923000 R08: 0000000000000000 R09: 0000000000000000 [ 2458.308315][T29821] R10: ffffffff815b742b R11: 0000000000000000 R12: 0000000000000246 [ 2458.316290][T29821] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88807ff76db8 [ 2458.324270][T29821] ? wake_up_klogd+0xcb/0x100 [ 2458.328963][T29821] ? vprintk_func+0x95/0x1e0 [ 2458.333574][T29821] ? percpu_ref_kill_and_confirm+0x169/0x1d0 [ 2458.339572][T29821] io_ring_ctx_wait_and_kill+0x2b/0x450 [ 2458.345139][T29821] io_uring_release+0x3e/0x50 [ 2458.349824][T29821] __fput+0x283/0x920 [ 2458.353827][T29821] ? io_ring_ctx_wait_and_kill+0x450/0x450 [ 2458.359644][T29821] task_work_run+0xdd/0x190 [ 2458.364162][T29821] exit_to_user_mode_prepare+0x1f0/0x200 [ 2458.369804][T29821] syscall_exit_to_user_mode+0x19/0x50 [ 2458.375334][T29821] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2458.381244][T29821] RIP: 0033:0x45e149 [ 2458.385146][T29821] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2458.404935][T29821] RSP: 002b:00007f8f0577dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2458.413382][T29821] RAX: fffffffffffffff4 RBX: 00000000200001c0 RCX: 000000000045e149 [ 2458.421366][T29821] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 00000000000056c8 [ 2458.429345][T29821] RBP: 00007f8f0577dca0 R08: 00000000200002c0 R09: 00000000200002c0 [ 2458.437406][T29821] R10: 0000000020000240 R11: 0000000000000206 R12: 0000000020ffc000 [ 2458.445384][T29821] R13: 0000000020ffc000 R14: 00000000200002c0 R15: 0000000020000240 [ 2458.454296][T29821] Kernel Offset: disabled [ 2458.459021][T29821] Rebooting in 86400 seconds..