9, 0xfff, 0x2, 0x1, 0x8, 0x7ff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001, 0x810, r0, 0x8001) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) socketpair(0x28, 0x1, 0x800, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000280)=0x4000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2100040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x700, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1054}, 0x815) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000071404002abd7000fbdbdf250900020073797a32000000000900020073797a310000000008004400", @ANYRES32, @ANYBLOB="794289fcefa5a288fc926ead9536670eaeeca23ef8"], 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x80) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x3e2000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ff7000/0x6000)=nil}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r4, 0xf5000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x7) 19:29:41 executing program 4: mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x110, 0xffffffffffffffff, 0x7e000) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) 19:29:41 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x2, 0x5, 0x3f, 0x0, 0x24, 0x7b8020f3f119a252, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x10001, 0xa83d}, 0x8808, 0x3, 0x7, 0x7, 0xfffffffffffffffc, 0x95, 0x9}, 0x0, 0x8, r0, 0x8) mmap$perf(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x80a0110, r1, 0x8000) socketpair(0x1cea05e514447352, 0x6, 0xa01a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) recvmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/255, 0xff}], 0x1}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r2) 19:29:41 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) 19:29:41 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2004, 0x0, 0x13, r0, 0x0) [ 1608.288308] FAULT_INJECTION: forcing a failure. [ 1608.288308] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.323479] FAULT_INJECTION: forcing a failure. [ 1608.323479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1608.349960] CPU: 1 PID: 8577 Comm: syz-executor.5 Not tainted 4.19.184-syzkaller #0 [ 1608.357810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.367175] Call Trace: [ 1608.369790] dump_stack+0x1fc/0x2ef [ 1608.373443] should_fail.cold+0xa/0xf [ 1608.377260] ? lock_acquire+0x170/0x3c0 [ 1608.381253] ? setup_fault_attr+0x200/0x200 [ 1608.385641] __alloc_pages_nodemask+0x239/0x2890 [ 1608.390420] ? is_bpf_text_address+0xd5/0x1b0 [ 1608.395023] ? do_raw_read_unlock+0x3b/0x70 [ 1608.399462] ? _raw_read_unlock+0x29/0x40 [ 1608.403740] ? page_is_ram+0xf3/0x140 [ 1608.407919] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1608.412779] ? is_bpf_text_address+0xfc/0x1b0 [ 1608.417643] ? reserve_memtype+0x140/0x840 [ 1608.421995] ? pat_init+0x4c0/0x4c0 [ 1608.425932] ? memtype_seq_stop+0x20/0x20 [ 1608.430222] ? kernel_map_sync_memtype+0x65/0x170 [ 1608.436229] ? reserve_pfn_range+0xf8/0x450 [ 1608.440953] alloc_pages_current+0x193/0x2a0 [ 1608.445392] ? do_mmap+0x8e8/0x1080 [ 1608.449046] pte_alloc_one+0x16/0x190 [ 1608.452893] __pte_alloc+0x21/0x340 [ 1608.456544] remap_pfn_range+0xc73/0xee0 [ 1608.460650] ? __pmd_alloc+0x440/0x440 [ 1608.464605] ? wait_for_completion_io+0x10/0x10 [ 1608.469299] vm_iomap_memory+0x13f/0x190 [ 1608.473385] fb_mmap+0x403/0x4f0 [ 1608.476775] mmap_region+0xc94/0x16b0 [ 1608.480600] ? vm_munmap+0x140/0x140 [ 1608.484338] ? security_mmap_addr+0x73/0x90 [ 1608.488680] ? get_unmapped_area+0x294/0x3c0 [ 1608.497199] do_mmap+0x8e8/0x1080 [ 1608.501402] vm_mmap_pgoff+0x197/0x200 [ 1608.505312] ? vma_is_stack_for_current+0xc0/0xc0 [ 1608.510174] ? do_dup2+0x450/0x450 [ 1608.513730] ? wait_for_completion_io+0x10/0x10 [ 1608.518422] ? vfs_write+0x393/0x540 [ 1608.522160] ksys_mmap_pgoff+0x298/0x5a0 [ 1608.526241] ? find_mergeable_anon_vma+0x260/0x260 [ 1608.531196] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1608.536588] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1608.541634] ? do_syscall_64+0x21/0x620 [ 1608.545632] do_syscall_64+0xf9/0x620 [ 1608.549560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1608.554764] RIP: 0033:0x466459 [ 1608.557971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.576883] RSP: 002b:00007ff263974188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1608.584749] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1608.592031] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 19:29:41 executing program 1: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xd) [ 1608.599313] RBP: 00007ff2639741d0 R08: 0000000000000003 R09: 0000000000000000 [ 1608.606591] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1608.614134] R13: 00007ffc0901590f R14: 00007ff263974300 R15: 0000000000022000 [ 1608.644782] CPU: 0 PID: 8570 Comm: syz-executor.0 Not tainted 4.19.184-syzkaller #0 [ 1608.652628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.662131] Call Trace: [ 1608.664740] dump_stack+0x1fc/0x2ef [ 1608.668740] should_fail.cold+0xa/0xf [ 1608.672560] ? __lock_acquire+0x6de/0x3ff0 [ 1608.676819] ? setup_fault_attr+0x200/0x200 [ 1608.681154] ? aa_file_perm+0x3f0/0xd20 [ 1608.685178] ? should_fail+0x142/0x7b0 [ 1608.689266] ? fs_reclaim_release+0xd0/0x110 [ 1608.693691] __should_failslab+0x115/0x180 [ 1608.697945] should_failslab+0x5/0x10 [ 1608.701755] kmem_cache_alloc+0x3f/0x370 [ 1608.705831] anon_vma_clone+0xe0/0x5e0 [ 1608.709739] __split_vma+0x179/0x560 [ 1608.713513] do_munmap+0x2f0/0xde0 [ 1608.717083] mmap_region+0x2a3/0x16b0 [ 1608.720902] ? vm_munmap+0x140/0x140 [ 1608.724625] ? security_mmap_addr+0x73/0x90 [ 1608.729074] ? get_unmapped_area+0x294/0x3c0 [ 1608.733612] do_mmap+0x8e8/0x1080 [ 1608.737094] vm_mmap_pgoff+0x197/0x200 19:29:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x81, 0x94601) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00', 0xffffffffffffffff) r1 = mq_open(&(0x7f0000000040)='\x00', 0x0, 0x18, &(0x7f0000000080)={0x72, 0x7, 0xfffffffffffffffc, 0x24000000000}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) [ 1608.741007] ? vma_is_stack_for_current+0xc0/0xc0 [ 1608.745869] ? do_dup2+0x450/0x450 [ 1608.749513] ? wait_for_completion_io+0x10/0x10 [ 1608.754203] ? vfs_write+0x393/0x540 [ 1608.757936] ksys_mmap_pgoff+0x298/0x5a0 [ 1608.762014] ? find_mergeable_anon_vma+0x260/0x260 [ 1608.766960] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1608.772341] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1608.777371] ? do_syscall_64+0x21/0x620 [ 1608.781535] do_syscall_64+0xf9/0x620 [ 1608.785357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1608.790559] RIP: 0033:0x466459 [ 1608.793760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.813537] RSP: 002b:00007fcab2de7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1608.821436] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1608.829011] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 [ 1608.836488] RBP: 00007fcab2de71d0 R08: 0000000000000003 R09: 0000000000000000 19:29:42 executing program 5 (fault-call:1 fault-nth:6): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:42 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2007, 0x0, 0x13, r0, 0x0) [ 1608.843770] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1608.851055] R13: 00007ffdc96df46f R14: 00007fcab2de7300 R15: 0000000000022000 [ 1608.862457] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.868111] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.932827] FAULT_INJECTION: forcing a failure. [ 1608.932827] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.948316] CPU: 0 PID: 8615 Comm: syz-executor.5 Not tainted 4.19.184-syzkaller #0 [ 1608.956170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.965629] Call Trace: [ 1608.968241] dump_stack+0x1fc/0x2ef [ 1608.971889] should_fail.cold+0xa/0xf [ 1608.975715] ? setup_fault_attr+0x200/0x200 [ 1608.980232] ? lock_acquire+0x170/0x3c0 [ 1608.984238] __should_failslab+0x115/0x180 [ 1608.988495] should_failslab+0x5/0x10 [ 1608.992310] kmem_cache_alloc+0x277/0x370 [ 1608.996476] ptlock_alloc+0x1d/0x70 [ 1609.000120] pte_alloc_one+0x68/0x190 [ 1609.003942] __pte_alloc+0x21/0x340 [ 1609.007585] remap_pfn_range+0xc73/0xee0 [ 1609.011671] ? __pmd_alloc+0x440/0x440 [ 1609.015781] ? wait_for_completion_io+0x10/0x10 [ 1609.020466] vm_iomap_memory+0x13f/0x190 [ 1609.024580] fb_mmap+0x403/0x4f0 [ 1609.028066] mmap_region+0xc94/0x16b0 [ 1609.031868] ? vm_munmap+0x140/0x140 [ 1609.035582] ? security_mmap_addr+0x73/0x90 [ 1609.039909] ? get_unmapped_area+0x294/0x3c0 [ 1609.044313] do_mmap+0x8e8/0x1080 [ 1609.047773] vm_mmap_pgoff+0x197/0x200 [ 1609.051660] ? vma_is_stack_for_current+0xc0/0xc0 [ 1609.056487] ? do_dup2+0x450/0x450 [ 1609.060027] ? wait_for_completion_io+0x10/0x10 [ 1609.064690] ? vfs_write+0x393/0x540 [ 1609.068402] ksys_mmap_pgoff+0x298/0x5a0 [ 1609.072477] ? find_mergeable_anon_vma+0x260/0x260 [ 1609.077529] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1609.083009] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1609.088137] ? do_syscall_64+0x21/0x620 [ 1609.092123] do_syscall_64+0xf9/0x620 [ 1609.095916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1609.101093] RIP: 0033:0x466459 [ 1609.104394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1609.123290] RSP: 002b:00007ff263974188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 19:29:42 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:42 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 19:29:42 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x624040, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000044) 19:29:42 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000f, 0xffffffffffffffff) 19:29:42 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x200a, 0x0, 0x13, r0, 0x0) [ 1609.131091] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1609.138369] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 [ 1609.145644] RBP: 00007ff2639741d0 R08: 0000000000000003 R09: 0000000000000000 [ 1609.152907] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1609.160178] R13: 00007ffc0901590f R14: 00007ff263974300 R15: 0000000000022000 19:29:42 executing program 5 (fault-call:1 fault-nth:7): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:42 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, r0) 19:29:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r2, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) [ 1609.295163] FAULT_INJECTION: forcing a failure. [ 1609.295163] name failslab, interval 1, probability 0, space 0, times 0 19:29:42 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xc00, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x3000)=nil) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0xa882, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x1010, r4, 0x180000000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan0\x00'}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) 19:29:42 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2010, 0x0, 0x13, r0, 0x0) [ 1609.377606] CPU: 1 PID: 8636 Comm: syz-executor.0 Not tainted 4.19.184-syzkaller #0 [ 1609.385461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.394828] Call Trace: [ 1609.397438] dump_stack+0x1fc/0x2ef [ 1609.401087] should_fail.cold+0xa/0xf [ 1609.404917] ? setup_fault_attr+0x200/0x200 [ 1609.409259] ? lock_acquire+0x170/0x3c0 [ 1609.413260] __should_failslab+0x115/0x180 [ 1609.417518] should_failslab+0x5/0x10 [ 1609.421338] kmem_cache_alloc+0x277/0x370 [ 1609.425524] vm_area_dup+0x1c/0x170 [ 1609.429171] __split_vma+0xa5/0x560 [ 1609.432823] do_munmap+0x369/0xde0 [ 1609.436476] mmap_region+0x2a3/0x16b0 [ 1609.440303] ? vm_munmap+0x140/0x140 [ 1609.444036] ? security_mmap_addr+0x73/0x90 [ 1609.448376] ? get_unmapped_area+0x294/0x3c0 [ 1609.452799] do_mmap+0x8e8/0x1080 [ 1609.456271] vm_mmap_pgoff+0x197/0x200 [ 1609.460187] ? vma_is_stack_for_current+0xc0/0xc0 [ 1609.465039] ? do_dup2+0x450/0x450 [ 1609.468588] ? wait_for_completion_io+0x10/0x10 [ 1609.473272] ? vfs_write+0x393/0x540 [ 1609.477120] ksys_mmap_pgoff+0x298/0x5a0 [ 1609.481202] ? find_mergeable_anon_vma+0x260/0x260 [ 1609.486163] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1609.491550] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1609.496589] ? do_syscall_64+0x21/0x620 [ 1609.500586] do_syscall_64+0xf9/0x620 [ 1609.504404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1609.509604] RIP: 0033:0x466459 19:29:42 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xffff, 0x80000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1, 0x4, 0x40}) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x37, 0x0, 0x7, 0x0, 0x8, 0x0, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x26, 0x4, @perf_config_ext={0x0, 0x9}, 0x8000, 0x6, 0x4, 0x4, 0x1f, 0x636, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x982a710cbe20f35c, 0x40010, r1, 0xc5) 19:29:42 executing program 2: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=""/81, 0x51}}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x1}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x100000e, 0xffffffffffffffff) [ 1609.512807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1609.531722] RSP: 002b:00007fcab2de7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1609.539453] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1609.546738] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 [ 1609.554026] RBP: 00007fcab2de71d0 R08: 0000000000000003 R09: 0000000000000000 [ 1609.561316] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1609.568602] R13: 00007ffdc96df46f R14: 00007fcab2de7300 R15: 0000000000022000 19:29:42 executing program 0 (fault-call:1 fault-nth:3): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:42 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 19:29:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:42 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x7fffdf005000, 0x0, 0x13, r0, 0x0) 19:29:42 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 19:29:42 executing program 2: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf, r0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x4, 0x3, 0x1, 0x6b7, 0x1, 0xe20}) 19:29:43 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x13, r0, 0x0) 19:29:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2002, 0x0, 0x13, r0, 0x0) [ 1609.795696] FAULT_INJECTION: forcing a failure. [ 1609.795696] name failslab, interval 1, probability 0, space 0, times 0 19:29:43 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) [ 1609.865531] CPU: 0 PID: 8710 Comm: syz-executor.0 Not tainted 4.19.184-syzkaller #0 [ 1609.873375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.882742] Call Trace: [ 1609.885353] dump_stack+0x1fc/0x2ef [ 1609.889008] should_fail.cold+0xa/0xf [ 1609.892833] ? setup_fault_attr+0x200/0x200 [ 1609.897177] ? validate_mm+0x4de/0x610 [ 1609.901079] ? should_fail+0x142/0x7b0 [ 1609.904985] ? fs_reclaim_release+0xd0/0x110 [ 1609.909411] __should_failslab+0x115/0x180 [ 1609.913660] should_failslab+0x5/0x10 [ 1609.917480] kmem_cache_alloc+0x3f/0x370 [ 1609.921556] anon_vma_clone+0xe0/0x5e0 [ 1609.925485] __split_vma+0x179/0x560 [ 1609.929217] do_munmap+0x369/0xde0 [ 1609.932783] mmap_region+0x2a3/0x16b0 [ 1609.936611] ? vm_munmap+0x140/0x140 [ 1609.940386] ? security_mmap_addr+0x73/0x90 [ 1609.944725] ? get_unmapped_area+0x294/0x3c0 [ 1609.949152] do_mmap+0x8e8/0x1080 [ 1609.952629] vm_mmap_pgoff+0x197/0x200 [ 1609.956537] ? vma_is_stack_for_current+0xc0/0xc0 [ 1609.961396] ? do_dup2+0x450/0x450 19:29:43 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x202123, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf25310000000c009900800040003300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x802}, 0x4002) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000d09c6b29cc286af42c94c677577131c5c158a731c47a9d9af2d9a86f7b2b3f2b2490d83ce3c13e441975578a59c0f28038e4b78f42ddba356256f92f4906089c1cb21c25dcbe29489019955782f87d1075a4de66b5f808715e343b0f5a47ac07568c322fadbf69939dbe966a460615bc8c509b5e1c5274a82ab4eabb90f6a256c37887fc872089874eec24497f", @ANYRES16=r2, @ANYBLOB="000229bd7000fddbdf2531000000088001002600000008000300", @ANYRES32=0x0, @ANYBLOB="fcff0200", @ANYRES32=0x0, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4040050}, 0x40080) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) socketpair(0x3, 0x80000, 0x1, &(0x7f0000000000)) 19:29:43 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 1609.964951] ? wait_for_completion_io+0x10/0x10 [ 1609.969643] ? vfs_write+0x393/0x540 [ 1609.973377] ksys_mmap_pgoff+0x298/0x5a0 [ 1609.977456] ? find_mergeable_anon_vma+0x260/0x260 [ 1609.982403] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1609.987788] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1609.992824] ? do_syscall_64+0x21/0x620 [ 1609.996820] do_syscall_64+0xf9/0x620 [ 1610.000641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1610.005841] RIP: 0033:0x466459 19:29:43 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20480, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x2, 0x1, 0x8}) [ 1610.009046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1610.028045] RSP: 002b:00007fcab2de7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1610.035771] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1610.043056] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 [ 1610.050341] RBP: 00007fcab2de71d0 R08: 0000000000000003 R09: 0000000000000000 [ 1610.057625] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1610.064909] R13: 00007ffdc96df46f R14: 00007fcab2de7300 R15: 0000000000022000 19:29:43 executing program 0 (fault-call:1 fault-nth:4): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2004, 0x0, 0x13, r0, 0x0) 19:29:43 executing program 4: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x11) 19:29:43 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) 19:29:43 executing program 1: clock_gettime(0x4, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x3, 0x2, 0x10001, 0x611, 0x1, 0x5, [], 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x40) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/87, 0x57, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x6, 0x0, 0x7, 0xfffffffffffffff0, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0x1, 0x0, 0xb, 0x10, 0x4}, @ldst={0x3, 0x0, 0x0, 0x1, 0x8, 0x2, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x7, 0x6, 0x5, 0x40, 0xfffffffffffffffc}, @generic={0xa7, 0x5, 0xf, 0x9, 0x134a}, @ldst={0x2, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x3f, 0x0, 0x0, 0x41000, 0x8, [], 0x0, 0x22, r1, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x8, 0x1, 0x3}, 0x10, r2}, 0x78) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:29:43 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x800db1b33a1d7cca, 0xffffffffffffffff) 19:29:43 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) 19:29:43 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100001b, r0) [ 1610.304973] FAULT_INJECTION: forcing a failure. [ 1610.304973] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.354231] CPU: 1 PID: 8764 Comm: syz-executor.0 Not tainted 4.19.184-syzkaller #0 [ 1610.362083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1610.371451] Call Trace: [ 1610.374063] dump_stack+0x1fc/0x2ef [ 1610.377719] should_fail.cold+0xa/0xf [ 1610.381541] ? setup_fault_attr+0x200/0x200 [ 1610.385885] ? lock_acquire+0x170/0x3c0 [ 1610.389888] __should_failslab+0x115/0x180 [ 1610.394147] should_failslab+0x5/0x10 [ 1610.397976] kmem_cache_alloc+0x277/0x370 [ 1610.402144] vm_area_alloc+0x1c/0x110 [ 1610.405969] mmap_region+0xa2a/0x16b0 [ 1610.409797] ? vm_munmap+0x140/0x140 [ 1610.413529] ? security_mmap_addr+0x73/0x90 [ 1610.417873] ? get_unmapped_area+0x294/0x3c0 [ 1610.422301] do_mmap+0x8e8/0x1080 [ 1610.425783] vm_mmap_pgoff+0x197/0x200 [ 1610.429699] ? vma_is_stack_for_current+0xc0/0xc0 [ 1610.434555] ? do_dup2+0x450/0x450 [ 1610.438114] ? wait_for_completion_io+0x10/0x10 [ 1610.442805] ? vfs_write+0x393/0x540 [ 1610.446541] ksys_mmap_pgoff+0x298/0x5a0 [ 1610.450625] ? find_mergeable_anon_vma+0x260/0x260 [ 1610.455566] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1610.460937] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1610.465979] ? do_syscall_64+0x21/0x620 [ 1610.469984] do_syscall_64+0xf9/0x620 [ 1610.473830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1610.479121] RIP: 0033:0x466459 [ 1610.482326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:29:43 executing program 1: socketpair(0x5, 0x80000, 0xc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003b00)={'syztnl0\x00', &(0x7f0000003a80)={'sit0\x00', 0x0, 0x4, 0x3, 0x3, 0x80000001, 0x10, @rand_addr=' \x01\x00', @mcast1, 0x10, 0x40, 0x3ff, 0x81}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003bc0)={'ip6_vti0\x00', &(0x7f0000003b40)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x2, 0xffff, 0x44, @empty, @loopback, 0x80, 0x7, 0x10001}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000003c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:29:43 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x4000)=nil) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000008, 0x4000010, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) 19:29:43 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x7, 0x13, r0, 0x0) 19:29:43 executing program 2: pkey_mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x3000006, 0xffffffffffffffff) mmap$fb(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0xc, 0x80010, 0xffffffffffffffff, 0x5a000) [ 1610.501286] RSP: 002b:00007fcab2de7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1610.509009] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1610.516300] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 [ 1610.523586] RBP: 00007fcab2de71d0 R08: 0000000000000003 R09: 0000000000000000 [ 1610.530872] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1610.538160] R13: 00007ffdc96df46f R14: 00007fcab2de7300 R15: 0000000000022000 19:29:43 executing program 0 (fault-call:1 fault-nth:5): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r1, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffa000/0x1000)=nil) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\xed%\xee\x00') ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 19:29:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x200a, 0x0, 0x13, r0, 0x0) 19:29:43 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x0) 19:29:43 executing program 2: pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) 19:29:43 executing program 1: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13) 19:29:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2010, 0x0, 0x13, r0, 0x0) [ 1610.806620] FAULT_INJECTION: forcing a failure. [ 1610.806620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1610.867226] CPU: 1 PID: 8822 Comm: syz-executor.0 Not tainted 4.19.184-syzkaller #0 [ 1610.875068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1610.884434] Call Trace: [ 1610.887052] dump_stack+0x1fc/0x2ef [ 1610.890742] should_fail.cold+0xa/0xf [ 1610.894571] ? lock_acquire+0x170/0x3c0 [ 1610.898570] ? setup_fault_attr+0x200/0x200 [ 1610.902927] __alloc_pages_nodemask+0x239/0x2890 [ 1610.907708] ? is_bpf_text_address+0xd5/0x1b0 [ 1610.912225] ? do_raw_read_unlock+0x3b/0x70 [ 1610.916571] ? _raw_read_unlock+0x29/0x40 [ 1610.920753] ? page_is_ram+0xf3/0x140 [ 1610.924580] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1610.929459] ? is_bpf_text_address+0xfc/0x1b0 [ 1610.933985] ? reserve_memtype+0x140/0x840 [ 1610.938250] ? pat_init+0x4c0/0x4c0 [ 1610.941905] ? memtype_seq_stop+0x20/0x20 [ 1610.946079] ? kernel_map_sync_memtype+0x65/0x170 [ 1610.951095] ? reserve_pfn_range+0xf8/0x450 [ 1610.955469] alloc_pages_current+0x193/0x2a0 [ 1610.959898] ? do_mmap+0x8e8/0x1080 [ 1610.963550] pte_alloc_one+0x16/0x190 [ 1610.967387] __pte_alloc+0x21/0x340 [ 1610.971044] remap_pfn_range+0xc73/0xee0 [ 1610.975144] ? __pmd_alloc+0x440/0x440 [ 1610.979057] ? wait_for_completion_io+0x10/0x10 [ 1610.983750] vm_iomap_memory+0x13f/0x190 [ 1610.987835] fb_mmap+0x403/0x4f0 [ 1610.991228] mmap_region+0xc94/0x16b0 [ 1610.995056] ? vm_munmap+0x140/0x140 [ 1610.998796] ? security_mmap_addr+0x73/0x90 [ 1611.003148] ? get_unmapped_area+0x294/0x3c0 [ 1611.007576] do_mmap+0x8e8/0x1080 [ 1611.011052] vm_mmap_pgoff+0x197/0x200 [ 1611.014962] ? vma_is_stack_for_current+0xc0/0xc0 [ 1611.019822] ? do_dup2+0x450/0x450 [ 1611.023374] ? wait_for_completion_io+0x10/0x10 [ 1611.028059] ? vfs_write+0x393/0x540 [ 1611.031793] ksys_mmap_pgoff+0x298/0x5a0 [ 1611.035876] ? find_mergeable_anon_vma+0x260/0x260 [ 1611.040830] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1611.046223] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1611.051258] ? do_syscall_64+0x21/0x620 [ 1611.055280] do_syscall_64+0xf9/0x620 [ 1611.059111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1611.064312] RIP: 0033:0x466459 [ 1611.067515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.086431] RSP: 002b:00007fcab2de7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1611.094277] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1611.101566] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 [ 1611.108874] RBP: 00007fcab2de71d0 R08: 0000000000000003 R09: 0000000000000000 19:29:44 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0xffffffffffffffff) 19:29:44 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x64) 19:29:44 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:29:44 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 19:29:44 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) shmget$private(0x0, 0xc000, 0x2, &(0x7f0000ff4000/0xc000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x3}) [ 1611.116324] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1611.123615] R13: 00007ffdc96df46f R14: 00007fcab2de7300 R15: 0000000000022000 19:29:44 executing program 0 (fault-call:1 fault-nth:6): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:44 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) r4 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) 19:29:44 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10, 0x13, r0, 0x0) 19:29:44 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x4000000001, 0x5, 0x85}) 19:29:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x201c, 0x0, 0x13, r0, 0x0) 19:29:44 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil}) 19:29:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2800) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) [ 1611.325527] FAULT_INJECTION: forcing a failure. [ 1611.325527] name failslab, interval 1, probability 0, space 0, times 0 19:29:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x201d, 0x0, 0x13, r0, 0x0) [ 1611.404494] CPU: 1 PID: 8862 Comm: syz-executor.0 Not tainted 4.19.184-syzkaller #0 [ 1611.412349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1611.421715] Call Trace: [ 1611.424324] dump_stack+0x1fc/0x2ef [ 1611.427977] should_fail.cold+0xa/0xf [ 1611.431797] ? setup_fault_attr+0x200/0x200 [ 1611.436140] ? lock_acquire+0x170/0x3c0 [ 1611.440136] __should_failslab+0x115/0x180 [ 1611.444389] should_failslab+0x5/0x10 [ 1611.448208] kmem_cache_alloc+0x277/0x370 [ 1611.452379] ptlock_alloc+0x1d/0x70 [ 1611.456026] pte_alloc_one+0x68/0x190 [ 1611.459845] __pte_alloc+0x21/0x340 [ 1611.463492] remap_pfn_range+0xc73/0xee0 [ 1611.467590] ? __pmd_alloc+0x440/0x440 [ 1611.471497] ? wait_for_completion_io+0x10/0x10 [ 1611.476189] vm_iomap_memory+0x13f/0x190 [ 1611.480272] fb_mmap+0x403/0x4f0 [ 1611.483662] mmap_region+0xc94/0x16b0 [ 1611.487483] ? vm_munmap+0x140/0x140 [ 1611.491221] ? security_mmap_addr+0x73/0x90 [ 1611.495563] ? get_unmapped_area+0x294/0x3c0 [ 1611.499996] do_mmap+0x8e8/0x1080 [ 1611.503470] vm_mmap_pgoff+0x197/0x200 [ 1611.507416] ? vma_is_stack_for_current+0xc0/0xc0 [ 1611.512275] ? do_dup2+0x450/0x450 [ 1611.515831] ? wait_for_completion_io+0x10/0x10 [ 1611.520522] ? vfs_write+0x393/0x540 [ 1611.524266] ksys_mmap_pgoff+0x298/0x5a0 [ 1611.528347] ? find_mergeable_anon_vma+0x260/0x260 [ 1611.533303] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1611.538691] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1611.543725] ? do_syscall_64+0x21/0x620 [ 1611.547723] do_syscall_64+0xf9/0x620 [ 1611.551550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1611.556841] RIP: 0033:0x466459 [ 1611.560055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.578972] RSP: 002b:00007fcab2de7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1611.586699] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1611.593987] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffa000 19:29:44 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x700, 0x13, r0, 0x0) 19:29:44 executing program 1: ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0x8, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x41) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xb) 19:29:44 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) [ 1611.601272] RBP: 00007fcab2de71d0 R08: 0000000000000003 R09: 0000000000000000 [ 1611.608554] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1611.615889] R13: 00007ffdc96df46f R14: 00007fcab2de7300 R15: 0000000000022000 19:29:44 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa00, 0x13, r0, 0x0) 19:29:45 executing program 0 (fault-call:1 fault-nth:7): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:45 executing program 4: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x10, 0x5, "f04af5a1a6cf265520da0abd1c64bf5316ec1f66b6e5075d3a52080e89ddd2c4c2f36fb550808d94c41e64a13a1be382d912ad5c4a36d537a44ada2983dd3558", "dea37be35f4d43e043579632ba52e73237e66c0b0e3b5af3cb372904e63ac2e3f1b0dcafeefacf8d16bb04ac3594e7c33883b432dcd759a57af0486e6b1b1555", "afb275ffcedbeb038e27bda5895a9613f106bf1483825e4a5362e33b3486e129", [0x0, 0x100]}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x5, 0x0, 0x51}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) madvise(&(0x7f0000c3e000/0x2000)=nil, 0x2000, 0x15) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0x0) 19:29:45 executing program 2: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000000c0)) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) socketpair(0x2a, 0x80000, 0x133, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x3ff, 0x80000) 19:29:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x7fffdf005000, 0x0, 0x13, r0, 0x0) 19:29:45 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 19:29:45 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000, 0x13, r0, 0x0) 19:29:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:29:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x13, r0, 0x0) 19:29:45 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x3) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xf4) 19:29:45 executing program 1: madvise(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0xb) 19:29:45 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000003, 0xffffffffffffffff) 19:29:45 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x13, r0, 0x0) 19:29:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2002, 0x0, 0x13, r0, 0x0) 19:29:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) 19:29:45 executing program 4: r0 = getpid() r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = fork() syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000800)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4010) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x8080) pause() madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1) 19:29:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d5}, 0x2404c8d1) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x3c, 0x5, 0x10}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil}) 19:29:45 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000006, 0x11, r1, 0xf670) mq_timedreceive(r0, &(0x7f0000000000)=""/4096, 0x1000, 0xb56, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r2 = userfaultfd(0x80800) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) 19:29:45 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x7ffff, 0x13, r0, 0x0) 19:29:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2004, 0x0, 0x13, r0, 0x0) 19:29:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) 19:29:45 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000, 0x13, r0, 0x0) 19:29:45 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x24, 0x1, @thr={&(0x7f0000000000)="90b4c0dfc73b5366346a53929bce2ffcc08a10b92361c238ebff779109e6", &(0x7f0000000040)="23e7800f1da39dc0a3652ac16d0ba91fa3cc792a49433513f14a7bb8a1106ddbe4429ba57b3c80d746236a0d27f08ef9f161a9a068b5f42dc51564e624fcea99ebaa1122ad9ae13ce1f7e0937ecb53093023122fab7cef5bab0c2f9e07b221f2df032171f2c7a6016644e80403508a32921bd04fee8da7b2159e2789fa58349945421fa96db46d9f2c37c8"}}) geteuid() madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x10) 19:29:45 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = fork() r2 = fork() syz_open_procfs$namespace(r2, 0x0) syz_open_procfs$namespace(r2, 0x0) r3 = mq_open(&(0x7f00000001c0)='@\xbd}(@\x00', 0x0, 0x10, &(0x7f0000000200)={0x7fffffff, 0x0, 0x1000, 0x5}) mq_notify(r3, &(0x7f0000000240)={0x0, 0x2c, 0x0, @tid=r1}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0xa6, 0xffffffc0, 0x2, 0x7, 0x21, r1}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) socketpair(0x29, 0x3, 0x5, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000300)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0dd1bb000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250700000006001d0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c8d1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000002c0)=0x10) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 19:29:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x0) 19:29:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x200a, 0x0, 0x13, r0, 0x0) 19:29:45 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$snddsp_control(&(0x7f0000fef000/0x11000)=nil, 0x1000, 0x0, 0x8010, r0, 0x83000000) 19:29:46 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x80) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) 19:29:46 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x400000, 0x13, r0, 0x0) 19:29:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10, 0x13, r0, 0x0) 19:29:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2010, 0x0, 0x13, r0, 0x0) 19:29:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x6000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 19:29:46 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x37386cf5447117a) shmget$private(0x0, 0xe000, 0x1000, &(0x7f0000ff2000/0xe000)=nil) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x602000, 0x0) mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10010, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) 19:29:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1c, 0x13, r0, 0x0) 19:29:46 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x800000, 0x13, r0, 0x0) 19:29:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x201c, 0x0, 0x13, r0, 0x0) 19:29:46 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0xfffffffffffffffc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xa4241, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x96, 0x5eb, 0x1c, @private2={0xfc, 0x2, [], 0x1}, @empty, 0x40, 0x8019, 0x3, 0x7}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x6) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x1d, r0}, 0x10, &(0x7f0000000840)={&(0x7f0000000080)={0x5, 0x102, 0x1, {0x0, 0xea60}, {}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "9432f3dc9d1496721d732f55bf6ec2b384f7806dfc4d545ef143ee2b01cefdfa77844ba1b1a4f4a4d8e6bcb6a09ba1b00b4a54f3414c73a8849710b6258e5ba9"}}, 0x80}}, 0x4010) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000c, 0x110, 0xffffffffffffffff, 0x83000000) 19:29:46 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$perf(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x6) 19:29:46 executing program 4: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x64) 19:29:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x201d, 0x0, 0x13, r0, 0x0) 19:29:46 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0x0) 19:29:46 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/cachefiles\x00', 0x111200, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000080011000000000005000400fe000000f900004408001700"/38, @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x48041) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:29:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x0) 19:29:46 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000004, 0xffffffffffffffff) 19:29:46 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) madvise(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x62) 19:29:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x7fffdf005000, 0x0, 0x13, r0, 0x0) 19:29:46 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0x0) 19:29:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa00, 0x13, r0, 0x0) 19:29:46 executing program 2: timerfd_create(0x5, 0x800) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) timerfd_create(0x7, 0x800) 19:29:46 executing program 1: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf) 19:29:46 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x64) 19:29:47 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r0, 0x0) 19:29:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x13, r0, 0x0) 19:29:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1c00, 0x13, r0, 0x0) 19:29:47 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x13) 19:29:47 executing program 4: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r0}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r2}) 19:29:47 executing program 2: rt_sigtimedwait(&(0x7f0000000000)={[0x8]}, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x3938700}, 0x8) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf, 0xffffffffffffffff) 19:29:47 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x7000000, 0x13, r0, 0x0) 19:29:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1d00, 0x13, r0, 0x0) 19:29:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) 19:29:47 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmget(0x1, 0x3000, 0x1, &(0x7f0000ff8000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3) 19:29:47 executing program 4: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x65) 19:29:47 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa000000, 0x13, r0, 0x0) 19:29:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000, 0x13, r0, 0x0) 19:29:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) 19:29:47 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000f, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000b40)='trusted\x00', &(0x7f0000000b80)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, r0, 0xfffffffffffffffe) 19:29:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x13, r0, 0x0) 19:29:47 executing program 4: madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) 19:29:47 executing program 1: ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) shmget(0x2, 0x400000, 0x1000, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000e80000/0x2000)=nil, 0x2000, 0x3) 19:29:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x0) 19:29:47 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10000000, 0x13, r0, 0x0) 19:29:47 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5) r0 = pkey_alloc(0x0, 0x2) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x2000005, 0x100010, 0xffffffffffffffff, 0x83000000) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000000, r0) 19:29:47 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000006, 0x810, 0xffffffffffffffff, 0x28000) 19:29:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10, 0x13, r0, 0x0) 19:29:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x7ffff, 0x13, r0, 0x0) 19:29:47 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x12) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000e85000/0x1000)=nil}) 19:29:47 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x20000000, 0x13, r0, 0x0) 19:29:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1c, 0x13, r0, 0x0) 19:29:47 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100, 0x10000) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x101, 0x20800) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil}) 19:29:47 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/194) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x46000) 19:29:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000, 0x13, r0, 0x0) 19:29:47 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) shmget(0x2, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 19:29:47 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffff0700, 0x13, r0, 0x0) 19:29:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x0) 19:29:47 executing program 4: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x12) 19:29:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x400000, 0x13, r0, 0x0) 19:29:48 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa, r0) 19:29:48 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x400000000000, 0x13, r0, 0x0) 19:29:48 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil}) 19:29:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa00, 0x13, r0, 0x0) 19:29:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x800000, 0x13, r0, 0x0) 19:29:48 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x1]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+10000000}, 0x8) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:29:48 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffffffffffffd, 0x13, r0, 0x0) 19:29:48 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100, 0x11b441) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x400002) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x800, 0x2040c0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 19:29:48 executing program 1: madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x64) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil}) 19:29:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0x0) 19:29:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1c00, 0x13, r0, 0x0) 19:29:48 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x200008d0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r2, 0x10, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x130, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0xf4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x130}}, 0x4004000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x64) 19:29:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0x0) 19:29:48 executing program 2: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000b, r0) 19:29:48 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x20000000000000, 0x13, r0, 0x0) 19:29:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1d00, 0x13, r0, 0x0) 19:29:48 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x24008814}, 0x40) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:29:49 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000009a02000037590600ffffffff18270000", @ANYRES32=r0, @ANYBLOB="00000000ad020000950000e1ce000000"], &(0x7f0000000080)='GPL\x00', 0xdb98, 0x0, 0x0, 0x40f00, 0x2, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x0, 0x1, 0x2}, 0x10, 0x2e9f4, r1}, 0x78) 19:29:49 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r0, 0x0) 19:29:49 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x141300, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 19:29:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000, 0x13, r0, 0x0) 19:29:49 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x80000000000000, 0x13, r0, 0x0) 19:29:49 executing program 1: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x15) 19:29:49 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) mmap$fb(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0xf6000) 19:29:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x13, r0, 0x0) 19:29:49 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000000000000, 0x13, r0, 0x0) 19:29:49 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)='/dev/cachefiles\x00'}, 0x30) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) r1 = userfaultfd(0x80000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) 19:29:49 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xd, 0x101, 0x10001, 0x5, 0x40, r0, 0x1ff, [], 0x0, r0, 0x0, 0x2, 0x1}, 0x40) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000035500000000000007000000851000000600000018270000aee2008ecd8f5b3f9d18a085c2e5e921046da6d86a6e8a38c7d11d6f3c74d1658c4bd1f284200ce1790477887c3935bb29268197ce30d8559518dc0017148561817bfd16da49d9533908ffa3f7dee6", @ANYRES32=r1, @ANYBLOB="000000000600000085100000ffffffff18190000", @ANYRES32=r2, @ANYBLOB="000000000000000018350000010000000000000000000000180000000600000000000000030000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0xfd, 0x0, 0x0, 0x40f00, 0x5, [], 0x0, 0x25, r3, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x9, 0x40, 0x3}, 0x10, 0xffffffffffffffff, r4}, 0x78) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1e, 0x0, 0x859b, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={[], [], @rand_addr=0x64010100}, 0x8, 0x8, 0x7, 0xa79e}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xa20}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 19:29:49 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa000000, 0x13, r0, 0x0) 19:29:49 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000000000000, 0x13, r0, 0x0) 19:29:49 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 19:29:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x7ffff, 0x13, r0, 0x0) 19:29:49 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)) 19:29:49 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10000000, 0x13, r0, 0x0) 19:29:49 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, r0) 19:29:49 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x900, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd, 0x80010, r0, 0x99000) socket$nl_rdma(0x10, 0x3, 0x14) remap_file_pages(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1000001, 0x1, 0x20000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) 19:29:49 executing program 4: pkey_mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/51) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x430c, 0x101800) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x12141) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ff5000/0x2000)=nil}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff6000/0x1000)=nil}) 19:29:49 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x400000000000000, 0x13, r0, 0x0) 19:29:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000, 0x13, r0, 0x0) 19:29:49 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1c000000, 0x13, r0, 0x0) 19:29:49 executing program 2: rt_sigtimedwait(&(0x7f0000000000)={[0x1ff]}, 0x0, &(0x7f0000000040), 0x8) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:49 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/72) 19:29:49 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x14) remap_file_pages(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000002, 0x1, 0x20000) 19:29:49 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1d000000, 0x13, r0, 0x0) 19:29:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x400000, 0x13, r0, 0x0) 19:29:49 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x700000000000000, 0x13, r0, 0x0) 19:29:49 executing program 2: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/72) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:49 executing program 1: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) 19:29:49 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x20000000, 0x13, r0, 0x0) 19:29:49 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10) mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0xd, 0x110, 0xffffffffffffffff, 0x83000000) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)) 19:29:49 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa00000000000000, 0x13, r0, 0x0) 19:29:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x800000, 0x13, r0, 0x0) 19:29:50 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, r0) 19:29:50 executing program 2: mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000006, 0x13, 0xffffffffffffffff, 0x4) 19:29:50 executing program 4: pselect6(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000140)={0x9}, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:29:50 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffff0700, 0x13, r0, 0x0) 19:29:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0x0) 19:29:50 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000000000000, 0x13, r0, 0x0) 19:29:50 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xbc0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 19:29:50 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) 19:29:50 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x11) 19:29:50 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x400000000000, 0x13, r0, 0x0) 19:29:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0x0) 19:29:50 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/12) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf) 19:29:50 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000000000000000, 0x13, r0, 0x0) 19:29:50 executing program 1: madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0xc0d2, 0x5, 0x8}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x91) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil}) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0xffffffffffffffff) 19:29:50 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffffffffffffd, 0x13, r0, 0x0) 19:29:50 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x33}}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x9fc76fa9a89cc0c4) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028fd7000fedbdf250100000008000500e000000208000500ffffffff080004007f0000010800080000000000"], 0x34}}, 0x40011) 19:29:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r0, 0x0) 19:29:50 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@get={0x108, 0x13, 0x1, 0x70bd2a, 0x25dfdbfb, {{'tgr128-generic\x00'}}, [{0x8, 0x1, 0xb80a}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x20}, {0x8, 0x1, 0x20}, {0x8, 0x1, 0x81}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) r1 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000040)={0x81, 0x800003, 0xfdfffbff, 0x2, 0x8009, 0x4}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x3, @thr={&(0x7f00000000c0)="82bfb49b96a3e3cd24ce61fe6263c5600322c94416649663d88dd1404852e0958d6d7c30332c2e3063c61d891d2cf90b0f8bea2e60afa33d2be18c3d39a10430bcce9b94a5bb4f8ef753718d6d3738d5afad8458702c10419abbdf701573868b9ce1e67b85e8ae189d3fb1f5af4ca2db67d102", &(0x7f0000000140)="fafd44aa294acf2c367a7c18bb954ecbd8d24a12beb816292cc6d27edf4e6d293cb5791d5edd5e93f00dd329e46d553793254d6fbea8c9048c190687abaf9307055e0161b4b0c1ee35"}}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x64) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) 19:29:50 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x4) 19:29:50 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8000000000000000, 0x13, r0, 0x0) 19:29:50 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x20000000000000, 0x13, r0, 0x0) 19:29:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa000000, 0x13, r0, 0x0) 19:29:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:50 executing program 1: madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) 19:29:50 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x102010, r0, 0x180000000) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x1000)=nil}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\'[-@_/\x00') madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:29:50 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xfdffffffffff0f00, 0x13, r0, 0x0) 19:29:50 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x80000000000000, 0x13, r0, 0x0) 19:29:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10000000, 0x13, r0, 0x0) 19:29:50 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = userfaultfd(0x101000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) 19:29:50 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 19:29:50 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffff070000000000, 0x13, r0, 0x0) 19:29:50 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000b40)='trusted\x00', &(0x7f0000000b80)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000b40)='trusted\x00', &(0x7f0000000b80)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$link(0x8, r1, r2) add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x63, r0) keyctl$negate(0xd, 0x0, 0x9, r0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000000000000, 0x13, r0, 0x0) 19:29:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1c000000, 0x13, r0, 0x0) 19:29:51 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x800000, 0x10010, 0xffffffffffffffff, 0x7d000) 19:29:51 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xa0002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10010, r0, 0x0) 19:29:51 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffffffff00000000, 0x13, r0, 0x0) 19:29:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000000000000, 0x13, r0, 0x0) 19:29:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1d000000, 0x13, r0, 0x0) 19:29:51 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x3840, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x1) 19:29:51 executing program 1: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x64) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x95) 19:29:51 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2) 19:29:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x400000000000000, 0x13, r0, 0x0) 19:29:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x20000000, 0x13, r0, 0x0) 19:29:51 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, r0) 19:29:51 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4) 19:29:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa00000000000000, 0x13, r0, 0x0) 19:29:51 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x7) 19:29:51 executing program 1: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x12) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/156) mmap$snddsp_control(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0xad2ab6f9180e82f5, 0xffffffffffffffff, 0x83000000) pkey_alloc(0x0, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x30, r0, 0x0) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, r1) 19:29:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffff0700, 0x13, r0, 0x0) 19:29:51 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/98) 19:29:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000000000000, 0x13, r0, 0x0) 19:29:51 executing program 4: r0 = socket(0x15, 0x2, 0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') r2 = fork() syz_open_procfs$namespace(r2, 0x0) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4d, 0x59}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3c}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20804}, 0x4004800) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) 19:29:51 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) shmget(0x2, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) 19:29:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1c00000000000000, 0x13, r0, 0x0) 19:29:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x400000000000, 0x13, r0, 0x0) 19:29:51 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa) 19:29:51 executing program 1: madvise(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3) 19:29:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1d00000000000000, 0x13, r0, 0x0) 19:29:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10012, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:29:52 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001200)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f0000001240)=0x10) 19:29:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffffffffffffd, 0x13, r0, 0x0) 19:29:52 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10) 19:29:52 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 19:29:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000000000000000, 0x13, r0, 0x0) 19:29:52 executing program 2: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x880, 0x0) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x30, r2, 0x2d000) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20068080}, 0x40) socket$inet6_udplite(0xa, 0x2, 0x88) 19:29:52 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x700) 19:29:52 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 19:29:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x20000000000000, 0x13, r0, 0x0) 19:29:52 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/245, 0xf5}, {&(0x7f0000000180)=""/25, 0x19}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000480)=""/78, 0x4e}], 0x8, &(0x7f0000000580)=""/194, 0xc2}, 0x2002) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x100000000) 19:29:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8000000000000000, 0x13, r0, 0x0) 19:29:52 executing program 2: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = getpid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x88}, 0x20000040) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0xfffffffffffffffc) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 19:29:52 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa00) 19:29:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r0, 0xfffffffffffffffa) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:29:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x80000000000000, 0x13, r0, 0x0) 19:29:52 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) mlock2(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) 19:29:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xfdffffffffff0f00, 0x13, r0, 0x0) 19:29:52 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2000) 19:29:52 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x4) 19:29:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000000000000, 0x13, r0, 0x0) 19:29:52 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) 19:29:52 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x12) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8100, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3f) 19:29:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffff070000000000, 0x13, r0, 0x0) 19:29:52 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4000) 19:29:52 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000000000000, 0x13, r0, 0x0) 19:29:52 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) 19:29:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffffffff00000000, 0x13, r0, 0x0) 19:29:52 executing program 1: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) mmap$fb(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0xb3000) 19:29:52 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000a, 0xffffffffffffffff) 19:29:52 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x7ffff) 19:29:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x400000000000000, 0x13, r0, 0x0) 19:29:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2) 19:29:53 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb59a7578fef2a437, 0x810, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r3 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2531000000080001001600000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="080001002c000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8820}, 0x24048051) 19:29:53 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0xff, 0x9, 0x4, 0x7f}, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfff}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa7d}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 19:29:53 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x200000) 19:29:53 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000e, 0xffffffffffffffff) 19:29:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa00000000000000, 0x13, r0, 0x0) 19:29:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4) 19:29:53 executing program 1: madvise(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x14) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff4000/0xc000)=nil}) 19:29:53 executing program 4: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) 19:29:53 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x400000) 19:29:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000000000000, 0x13, r0, 0x0) 19:29:53 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)={0x580, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x50c, 0x8, 0x0, 0x1, [{0x4cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d624d8e0cb946786e96159d40b3fa8bfd01a98b1a59cba08004dea28bd079eda"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x26}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x3d0, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x1b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @loopback}}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}]}, 0x580}, 0x1, 0x0, 0x0, 0x40884}, 0xd6fc9a05b343a0f6) 19:29:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa) 19:29:53 executing program 1: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10) 19:29:53 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) 19:29:53 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x800000) 19:29:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1c00000000000000, 0x13, r0, 0x0) 19:29:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10) 19:29:53 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x769bc968, 0x400600) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil}) 19:29:53 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000f, 0xffffffffffffffff) 19:29:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1d00000000000000, 0x13, r0, 0x0) 19:29:53 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) userfaultfd(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) 19:29:53 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000000) 19:29:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1c) 19:29:53 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x50, 0xffffffffffffffff, 0x100000000) prctl$PR_SVE_SET_VL(0x32, 0x2ad7a) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000008, 0x80010, 0xffffffffffffffff, 0xbc000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101002, 0x0) 19:29:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000000000000000, 0x13, r0, 0x0) 19:29:53 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x301103, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000080)=0xfffffbff) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x9) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:53 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) mincore(&(0x7f0000ff8000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/146) 19:29:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1d) 19:29:54 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2000000) 19:29:54 executing program 4: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3) 19:29:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8000000000000000, 0x13, r0, 0x0) 19:29:54 executing program 1: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xff7fffffffffb41e) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x7fff) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:29:54 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) mmap$snddsp_control(&(0x7f0000ff6000/0x7000)=nil, 0x1000, 0x1000005, 0x4010, 0xffffffffffffffff, 0x83000000) 19:29:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa00) 19:29:54 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4000000) 19:29:54 executing program 4: socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x1, 0xe9, 0x7}, &(0x7f0000000040)) 19:29:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xfdffffffffff0f00, 0x13, r0, 0x0) 19:29:54 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) 19:29:54 executing program 2: r0 = pkey_alloc(0x0, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', r1) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x100000001) pkey_mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, r0) 19:29:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1c00) 19:29:54 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x7000000) 19:29:54 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x13) 19:29:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffff070000000000, 0x13, r0, 0x0) 19:29:54 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x4, 0x2, 0x4}) 19:29:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1d00) 19:29:54 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xc85}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x881}, 0x80) 19:29:54 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa000000) 19:29:54 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x180000a, 0x110, 0xffffffffffffffff, 0x180000000) 19:29:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xffffffff00000000, 0x13, r0, 0x0) 19:29:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2000) 19:29:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70002ff0d1d9fe"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x200410c0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r2) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 19:29:54 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 19:29:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2) 19:29:54 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) shmget(0x2, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) 19:29:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4000) 19:29:55 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x8001, 0x4, 0x90}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x40482, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x30, r1, 0x25000) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) 19:29:55 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x20000000) 19:29:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4) 19:29:55 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1800003, r0) 19:29:55 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x65818b5dca309cf9, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x400c040) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:29:55 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x7ffff) 19:29:55 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0)='gtp\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x84) keyctl$link(0x8, 0x0, 0xfffffffffffffffc) 19:29:55 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x2000c040) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000150}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1849, 0x4, 0xf06, 0xca8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x409c}, 0x11) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) 19:29:55 executing program 4: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ff8000/0x4000)=nil, 0x1000, 0x2, 0x2010, r0, 0x83000000) 19:29:55 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffff0700) 19:29:55 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x200000) 19:29:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa) 19:29:55 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r0, 0xba000) 19:29:55 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:55 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x13) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x10010, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x15) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x4951c323145461ba}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x40) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x54000) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd) 19:29:55 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x400000000000) 19:29:55 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x400000) 19:29:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10) 19:29:55 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffffffffffffd) 19:29:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1c) 19:29:55 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ff9000/0x1000)=nil}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x15, 0x5, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000280)={r4}) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000200)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={r1}) mincore(&(0x7f0000ff9000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/210) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 19:29:55 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x9b, 0x40, 0x7f, 0x8, 0x0, 0x0, 0x101, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0xa24, 0x7}, 0x8b0, 0x7, 0x6, 0xb, 0x8, 0x0, 0x20}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x5) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)=',[-%\x00') pkey_alloc(0x0, 0x4) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/72) sigaltstack(&(0x7f0000ff6000/0x7000)=nil, &(0x7f00000001c0)) 19:29:55 executing program 4: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) 19:29:55 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x800000) 19:29:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1d) 19:29:55 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x20000000000000) 19:29:55 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) remap_file_pages(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x149f, 0x4000) 19:29:55 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x11) 19:29:55 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x8885) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000f, 0xffffffffffffffff) 19:29:55 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000000) 19:29:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022640700013f100001f0000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:29:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa00) 19:29:55 executing program 4: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) 19:29:56 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000000000) 19:29:56 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1c00) 19:29:56 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2000000) 19:29:56 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x8, 0x9, 0x0, 0x0, 0x5, 0x400, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff9, 0xec1}, 0x8100, 0x3, 0x5, 0xc, 0x0, 0x4, 0x800}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x100) 19:29:56 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) sigaltstack(&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) 19:29:56 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x100000000000000) 19:29:56 executing program 4: madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:29:56 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1d00) 19:29:56 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4000000) 19:29:56 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x200008d0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r1, 0x10, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040d0}, 0x10) 19:29:56 executing program 4: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x17, &(0x7f0000000040)='}-\x02-.]^!*!&,&[@+^(!^\xb7-\x00'}, 0x30) 19:29:56 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x200000000000000) 19:29:56 executing program 1: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x61) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 19:29:56 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2000) 19:29:56 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa000000) 19:29:56 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', 0xffffffffffffffff) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x83000000) 19:29:56 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x400000000000000) 19:29:56 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4000) 19:29:56 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) 19:29:56 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 19:29:56 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0)='nl802154\x00', r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100000000000fcdbdf250900000005000700030000000c000600020000000200000008000300", @ANYRES32=r5, @ANYBLOB="080001000000000008000100000000000c00060000000000000000003afee6c06d8e4a31f548938954466a5106e412aadf4b45b84053c868654d5e82d3b8d0bc74ff97c7ea527661b64063e702a84ef5121ca14b01beef3940aea3add0af10ca5e5b2b1f20310886c5ac6e15fff9a9de53185d68577d6fdde031de96a646bc72ee3a867fcc7ee56b703b33db5e861784c7851ab4767c09f4e82085d13274ffecc5e11166412bb20ca4434a0f77d3a07469b502a6277fec7a174fcf"], 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000013", @ANYRES16=r3, @ANYBLOB="00042bbd7000fcdbdf251c00000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4008080) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0xc000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:56 executing program 4: madvise(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x11) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x6, 0x40) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:29:56 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x7ffff) 19:29:56 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x700000000000000) 19:29:56 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x1000)=nil}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x191000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, 0xfffffffffffffffd}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0xa001, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c, 0x6010, r1, 0xffffffffffffffba) 19:29:56 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1c000000) 19:29:56 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x200000) 19:29:56 executing program 4: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) 19:29:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1d000000) 19:29:57 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa00000000000000) 19:29:57 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x12, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x8, 0x8010, r0, 0x0) 19:29:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x400000) 19:29:57 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) 19:29:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x20000000) 19:29:57 executing program 1: madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20000, 0x0) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x40010, r0, 0x34000) 19:29:57 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000000000000000) 19:29:57 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0xfffffffffffffe86, r0) 19:29:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x800000) 19:29:57 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x100000001, 0x3, 0x1}) 19:29:57 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2000000000000000) 19:29:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffff0700) 19:29:57 executing program 1: socketpair(0xa, 0x6, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x100000000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:29:57 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x161820, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x715c42) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x26100, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000000) 19:29:57 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) 19:29:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x400000000000) 19:29:57 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000000000000) 19:29:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2000000) 19:29:57 executing program 2: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) socketpair(0x29, 0x80000, 0xffff, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', r0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="0800050000000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="b0d2f42ccb5214141a6d41fa7b94ce3288b576f0aafa68"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000001c0)={r1, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)={r2}) 19:29:57 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x65) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x2, 0x80000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40502, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x50, r0, 0x0) 19:29:57 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcbe, 0x0, 0x0, 0x0, 0x100}, [@ldst={0x3, 0x0, 0x6, 0xb, 0x0, 0xfffffffffffffffe, 0x10}, @ldst={0x1, 0x2, 0x3, 0xa, 0x9, 0x2, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x4, [], 0x0, 0x19, r0, 0x8, &(0x7f0000000080)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x9, 0x7, 0x9}, 0x10, 0x11e0c}, 0x78) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:29:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffffffffffffd) 19:29:57 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xfdffffffffff0f00) 19:29:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4000000) 19:29:58 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/229) 19:29:58 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000016, r0) 19:29:58 executing program 1: socket(0x26, 0xa, 0x9) 19:29:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x20000000000000) 19:29:58 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa000000) 19:29:58 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffff070000000000) 19:29:58 executing program 4: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x48, 0x4001}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffff6d4) 19:29:58 executing program 1: r0 = socket(0x22, 0x2, 0xff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008804}, 0x4c811) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:29:58 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f, 0x20010, r1, 0x1c000) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x11, r0, 0x100000000) 19:29:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000000000) 19:29:58 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 19:29:58 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffffffff00000000) 19:29:58 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x65) 19:29:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x100000000000000) 19:29:58 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = socket(0x1a, 0x0, 0x9) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x12030, r0, 0x80000000) 19:29:58 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7318, 0x400) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x8, 0x1, 0x22}) 19:29:58 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1c000000) 19:29:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004810) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x680002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:29:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x200000000000000) 19:29:58 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) 19:29:58 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1d000000) 19:29:58 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 19:29:58 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x4202) mmap$snddsp_control(&(0x7f0000ff8000/0x3000)=nil, 0x1000, 0x200000e, 0x10010, r0, 0x83000000) 19:29:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x400000000000000) 19:29:58 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x1) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x240880, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19:29:58 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0xffffffffffffffff) 19:29:58 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x20000000) 19:29:58 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x516, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x24008891) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0xfa000) 19:29:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa00000000000000) 19:29:58 executing program 1: madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x212000, 0x0) mmap$fb(&(0x7f0000e60000/0x4000)=nil, 0x4000, 0x9, 0x50, r1, 0xb5000) socket$inet_udp(0x2, 0x2, 0x0) 19:29:59 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffff0700) 19:29:59 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xa0002, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="9863394433adaa4e39615716e1292fe99c14d59626ee4b8ae519233d441e452444a2851fd8430d2699be7c96f8b7a928e7697481b3c5f553c90fb224da134b2beff3e790cf467067e3d16ca0adff14d405ac99c223639b73110d78fead3571fe7fa95cf99e00fdf92efe0f18aad4d9184768c4694f12e6", 0x77, 0x6, &(0x7f0000000140)={r1, r2+60000000}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 19:29:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_delroute={0x120, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {0x2, 0x14, 0x0, 0x2a, 0xff, 0x3, 0x0, 0x2, 0x100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_IIF={0x8}, @RTA_ENCAP_TYPE={0x6}, @RTA_MARK={0x8, 0x10, 0xb9e969c}, @RTA_METRICS={0xd9, 0x8, 0x0, 0x1, "12a88f02fb6d277e181dc4e7377f0dafbfa3cf5ff43879ee5e8298894b8acbbdca6ca2cddc125001fa66636ce08f2e07f57d3bbea5c31dc570df2baf18fa152f9149902ed987bbf4cc3d5005df3302bddd83fdb524c7cfd0fb2c67ed6c6ea82704bad2591d3505d18ae1558e373974513a66a47468b73ba3246460f1e2a1e5841e0f2ad8fca8a87e603b289d996866a4b1f56acc170879d89a6686e35e72cf7f64993e184069859c038eecd7991d256870b46761eb9e9bbbe33edbf60ffcb2e36a2db1602695f1da4561f3a527c46ee835d7f808bd"}, @RTA_SRC={0x8, 0x2, @remote}]}, 0x120}, 0x1, 0x0, 0x0, 0xe6ad454c47c0107}, 0x4000) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1402, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c004}, 0x80) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:29:59 executing program 1: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffa000/0x2000)=nil) 19:29:59 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000000000000000) 19:29:59 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:29:59 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x400000000000) 19:29:59 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x208000, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 19:29:59 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1c00000000000000) 19:29:59 executing program 1: r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x12, 0xc, 0x3f, 0x0, 0x0, 0x100000001, 0x2248, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x50, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x90, 0x100000001, 0x0, 0x1, 0x786, 0x40, 0x2}, r0, 0xd, 0xffffffffffffffff, 0x3) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:29:59 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, 0xffffffffffffffff, 0x80000000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil}) 19:29:59 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffffffffffffd) 19:29:59 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1d00000000000000) 19:29:59 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x11, 0xffffffffffffffff, 0x7fff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xfff8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_getnetconf={0x24, 0x52, 0x4, 0x9d, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1000}, @NETCONFA_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x8108) 19:29:59 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000001, 0x810, r0, 0x3000) 19:29:59 executing program 1: ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x65) 19:29:59 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x20000000000000) 19:29:59 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2000000000000000) 19:29:59 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 19:29:59 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) mmap$binder(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='/dev/cachefiles\x00') mmap$dsp(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2, 0x1010, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) 19:29:59 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000000000000) 19:29:59 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x24000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x80000c) userfaultfd(0x80800) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) 19:29:59 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mincore(&(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/101) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xb8000) 19:29:59 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000000000) 19:29:59 executing program 4: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000140)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20002, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_timedsend(r2, &(0x7f0000000000)="fab0186a31a3d87dae9d", 0xa, 0x7, &(0x7f0000000080)={0x0, 0x989680}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:29:59 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf, 0xffffffffffffffff) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x30010, 0xffffffffffffffff, 0x100000000) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/147) 19:29:59 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xfdffffffffff0f00) 19:29:59 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x100000001, 0x4000) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000004, 0x1010, 0xffffffffffffffff, 0x14000) socketpair(0x1, 0x4, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xe, 0xffffffffffffffff) 19:29:59 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x44080) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0x33, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 19:29:59 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x100000000000000) [ 1626.654590] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 19:30:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffff070000000000) 19:30:00 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0xffffffffffffffff) 19:30:00 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = socket(0x3, 0x800, 0xb4e) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 19:30:00 executing program 4: r0 = socket(0x26, 0x4, 0x477) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70002ff0d1d9fe"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000041}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r4, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x58890}, 0x20000080) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:30:00 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x200000000000000) 19:30:00 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf510c3d1cc52f137}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getlink={0xc0, 0x12, 0x504, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x100}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xcc27}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MAP={0x24, 0xe, {0x1ff, 0x9, 0x2, 0x7, 0xfd, 0xce}}, @IFLA_PORT_SELF={0x60, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '/dev/fb0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "aca2b3f1d8a942af10f7a7f11083dac1"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ba4fe059049537c043a24590a0072b2c"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "361160560739b248e3677f477bae5d54"}]}]}, 0xc0}}, 0x80001) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 19:30:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffffffff00000000) 19:30:00 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', r0) 19:30:00 executing program 1: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x2, 0x5}) 19:30:00 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x400000000000000) 19:30:00 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x400, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x5) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042ddb70be9d84888075dd027c6a63c30f", @ANYRES32, @ANYBLOB="08000400ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x24000040) 19:30:00 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x440000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x6, 0xec, "90877111161d488ae533388f490422de6424c822174d744c600b508060ad2c2da596f1be2ca92261dd2d4039d4b00fdedcd7ae80bda44caf7f38ea4e01169f7c9d6114f431e8c6760372c06554cce009360eb2d80124082c2a6c37150756f26f3ba2729d88c2a1ead88fbb37d395cf98cdfe0abdd03769b6059973bccf666a68517b3b8041f4f5bb4df96479d786f265a7ccd4415fd5c37dc44354d5399b9e86bb0555bfbfc95776519581a52a92760ccc30db5919a159f301662790f59b0c6f725c743fc368acd61cc7b9c04a5fbf9a7cda891faff1cc9b29451d7ac39594f31ff1ed85120da4283414e759"}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:00 executing program 1: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000000c0)=0xff) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 19:30:00 executing program 4: madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r0, &(0x7f0000000000)={0x68, 0x80000001, 0x2, 0x2a7}, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 19:30:00 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x12, &(0x7f0000ffd000/0x3000)=nil) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0xd6000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 19:30:00 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa00000000000000) 19:30:00 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x9, 0x3, 0x31}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x1000)=nil) 19:30:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20102, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x4000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 19:30:00 executing program 3: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x9fc76fa9a89cc0c4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x18}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x51c}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x4c}}, 0x24004085) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001e00)={'syztnl1\x00', &(0x7f0000001d80)={'sit0\x00', 0x0, 0x29, 0x4, 0x2, 0x0, 0x1, @empty, @remote, 0x720, 0x20, 0x80000000, 0x6}}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001e40)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480a0}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x3c, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) 19:30:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x119000) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x80010, 0xffffffffffffffff, 0x100000000) 19:30:00 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x2) 19:30:00 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000000000000000) 19:30:00 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/97) 19:30:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:00 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2800000, r0) 19:30:00 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x64) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x901faa6297afb1ff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', 0xffffffffffffffff) 19:30:00 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x30a080, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) 19:30:00 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1c00000000000000) 19:30:00 executing program 4: madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x32d200, 0x0) mmap$dsp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x1000)=nil, 0x4, 0x3, 0x8}) 19:30:00 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000e, r0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0x50, 0xffffffffffffffff, 0xfc000) 19:30:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0x15, 0x6, 0x7) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000300)={0x5, 0x132, 0x4, {0x77359400}, {0x77359400}, {0x2}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x18, 0x2, 0x0, 0x0, "4c6793e3522c3778f8e4e2a2f23df932d83ac018046c5adb5f38196d63b65c276add128e80d2c7170cb1e54e8d4a0acbf4179132dafd2f00af683cc4a42579ab"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, 0x20, 0x6, 0x3, 0x6, 0xff, 0x9, 0x1f, 0x10000}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x10002, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x3, 0x0, 0x6}) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x6, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) 19:30:00 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1d00000000000000) 19:30:00 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x83000000) 19:30:01 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x4000)=nil) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x841, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0xac000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:01 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x22448) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)={0x100, 0x5e, "1e9ae22c76edf2bbcd4f362686c2a4d27dd8f2be70c0688b8adc0704c0bfcdabfc9a474fe5d1476482b3d9e0f981875a1ba0db950e604b1cdd6895cc0476becba2478b8dec7e861dfe18f8e3d5f6a6edcd40f178963df0aef7740b9df909"}) 19:30:01 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x4010, r1, 0x5e000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) 19:30:01 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/218, 0xda}], 0x1, &(0x7f00000001c0)=""/67, 0x43}, 0x2071) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d06da9023f91009266990fcff599499b38e450d73cd7a79d295ed406093bb7d829399308fad9cca558766f33242473641cd15c", @ANYRES16=r1, @ANYBLOB="000226bd7000ffdbdf250100000008000c0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) 19:30:01 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x2000000000000000) 19:30:01 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0xffffffffffffffff) 19:30:01 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x65) 19:30:01 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r2, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:01 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) 19:30:01 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000000000000) 19:30:01 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/41) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x200008d0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x4c, r0, 0x10, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x894}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008811}, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000025bd7000ffdbdf251c0000000c00060003000000000000000c00060000000000000000000c00060003000000030000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000be21c06b712e779ae3e4fbabf59687409d787bdc0954e19151e218a03e06a71a8ef485ed8c642b4e1e9cddde8c7b00a7b86dbfb479609c41e4650e634e720d53513502adf1f7674f4e6c60109fa5feaff42e42df9e95138ef1ec0e8cf0b22a"], 0x58}, 0x1, 0x0, 0x0, 0x8804}, 0x80) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x5, 0x800) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x28110, 0xffffffffffffffff, 0x34) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x442000, 0x0) recvmsg(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000540)=""/81, 0x51}, {&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000006c0)=""/28, 0x1c}, {&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000740)=""/152, 0x98}, {&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001940)=""/196, 0xc4}, 0x40012001) 19:30:01 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 19:30:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x222200) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6cb7, 0x80) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r4}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:30:01 executing program 3: madvise(&(0x7f0000e53000/0x3000)=nil, 0x3000, 0x13) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x4, 0x4, 0x2b}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x2}) 19:30:01 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg2\x00'}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:01 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xfdffffffffff0f00) 19:30:01 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 19:30:01 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil}) 19:30:01 executing program 3: r0 = fork() syz_open_procfs$namespace(r0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3e, 0x1, @tid=r0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x81, 0x7, 0x1, 0x9, 0x0, 0x80, 0x20200, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_config_ext={0x6b, 0x7}, 0x40000, 0x1, 0x1, 0x0, 0xd7000, 0x1, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002900)='/dev/cachefiles\x00', 0xa000, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00', r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x84800) getpid() 19:30:01 executing program 4: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) 19:30:01 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffff070000000000) 19:30:01 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 19:30:01 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYBLOB="01abb1ab7d27adb8d5e7b0ee1021218caccf0efd1205450f188c4a8f7208201a5a49ce43ed95a3d29f4290c23d1e5a8293d6486ce6e5dd3cfbe3971ecdb7bf63b844876db0e4a85248cf7d33443976c8"], 0x24}}, 0x4000080) r3 = socket(0x3, 0x6, 0x81) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000f00474300000000000000", @ANYRES32=r3, @ANYBLOB="0c000f00ddecffffffffffff0c0016000800000000000000050014007f00000006000e00ff01000014002000fc0000000000000000000000000000011400200020010000000000000000000000000001"], 0x78}, 0x1, 0x0, 0x0, 0x4044089}, 0x40440c4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1ff}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x18081}, 0x40) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 19:30:01 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'vcan0\x00', @ifru_addrs=@phonet}}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)='..:@\x99]$\x00'}, 0x30) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x2010, r1, 0xff000) 19:30:01 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x6e0980, 0x0) 19:30:01 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x8042, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0x8010, r1, 0xfe000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c0100001900000326bd7000fedbdf250a20147f0000ff090002000008001900", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001000030000008b7ca77d2910ad7072b23094c123840ce6f93dc2957eb5848c316f8c04d5fb72d65f20dba03a7afb5c78867dead5c4db3b8b56e26c0d5dcd7311856702eadcb43ef204323e4448b572fda8ac40c6806dab"], 0x17c}, 0x1, 0x0, 0x0, 0x60000001}, 0x4000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$snddsp_control(&(0x7f0000ffa000/0x2000)=nil, 0x1000, 0x2, 0x20010, r0, 0x83000000) 19:30:01 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffffffff00000000) 19:30:01 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 19:30:01 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, r0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:01 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 19:30:01 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x40000, 0x0) 19:30:01 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) r1 = syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0x68240) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4845) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000380)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x44, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7f}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x88c9) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8, 0x1ec00) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000500)) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000002c0)={0x0, 0x0}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x180000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000300)={r6}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7539}, 0x8) 19:30:01 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:01 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x7b1b80, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14ca016c32d75500", @ANYRES16=r1, @ANYBLOB="020025bd7000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000840}, 0x0) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000200)=""/255) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0xae000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0xadb1780632c3109e, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0xac000) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 19:30:01 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 19:30:01 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x23, 0x80000, 0x401, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x6) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r1, 0x100000000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x440000, 0x0) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0xf1000) 19:30:01 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 19:30:01 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf={0xc7, &(0x7f0000000100)="99faa0f833bf239a06a10c8a3797f5d686f7dfc49ec12459fd862e9429adf2285d71508ef6c39cbb23f2c356b6a35003707b11356ce60c4b884bc6913eaf2f23c5e2f1d5a8c142b0fd3465feb3bed399b64b1c612112c8a6c96380f804f5ad61701fd81ba9fa29972bab5999d36f3317d8ed9a346a339b5e18b2feda03307647eab2bab187c88e9abbc947eecd67d3600a79c34d18e6f6ee74d2d2ebc7f75dc180ce909ff7b600346f51294e34d5a2ac38228699f809855c687df9dd345ddb11385172ee8f35c8"}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 19:30:01 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x9000, 0x0) 19:30:02 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) 19:30:02 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) pkey_alloc(0x0, 0x1) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x4000) 19:30:02 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:30:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x800, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1000004, 0x4000010, r1, 0x83000000) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0xfffffffffffffffe, 0x1, 0x44}) 19:30:02 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) 19:30:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x20010, r0, 0x92000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffff) 19:30:02 executing program 4: madvise(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x14) 19:30:02 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x3) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) 19:30:02 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x282081, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:02 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) 19:30:02 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) 19:30:02 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x14) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0x40010, r0, 0x80000000) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mq_timedsend(r1, &(0x7f0000000000)="e829009976b7c17b7f503df92105feaade696e5639c63e36a19be43fba1b9da63d7d5c8cb2cd7e7ddc4ab24093a7f52a4ac907aa852cd3c9167080ebaf66c19c668c8bcf429009a746fbea10b594eccc070c7e4e9d264009691cf7db0e3dcfbb4376edd6cba540304e7665df69bb14238efc2916e79b2014b1396267aa36a8b87f", 0x81, 0x80000000, 0x0) 19:30:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) 19:30:02 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000004, r1) 19:30:02 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x7, &(0x7f0000000000)=0x1) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) 19:30:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0xfffffffffffffffc) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x100000c, 0x10, 0xffffffffffffffff, 0x81e) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x100000d, 0x100010, 0xffffffffffffffff, 0x83000000) 19:30:02 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) 19:30:02 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) 19:30:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:02 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x2000006, 0xffffffffffffffff) 19:30:02 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xf8, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x20044085) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x2e9, 0x0, 0x8, 0x8, 0x1f]}, @SEG6_ATTR_ALGID={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048015}, 0x800) 19:30:02 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048014}, 0xc050) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:02 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) 19:30:02 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xff, 0x6, 0x9e, 0x4, 0x0, 0x3, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x1000, 0x522, 0xff, 0x7, 0x40, 0xffff, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0) mmap$perf(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x8001) 19:30:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00a700996ccfa1edb0b183230e0bee9aceef37973a9d258f127298e700ea0553a8be698cf0f632fb79c4e4098b92b9719503abe3a4ad15cc6582ea9a795c7ae6bb3c83eb165f72ce89d9c0a603299643afb884846406ce184ed28814e483e5e9f1dc8b548c85f7829a233f2b29370838e8426d1a44568a01e19591ee48ee313291c7e65cc66335ea3daf000e2e30c760630223a7b15177e359f86b1ac61835c5", @ANYRES16=0x0, @ANYBLOB="10002b190000000800030f326158cb2ed46c80e4caf393dbecc6e933038a73fd1eb0c6e85c9b067f6caa103de1ac00ca698333b9eb7b6699045859035e2ddd924fddfb9e5ddc1f249bf89b971abe2f91fe1572bf9e072aaedaf9de2e99d3dd56ecf92ffb302dd3888ccd67c3fc4d", @ANYRES32=r1, @ANYBLOB="d97f32841fdec40000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4000001) mmap$perf(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x3) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 19:30:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2b9a01, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:02 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil}) 19:30:02 executing program 1: syz_open_dev$dri(0x0, 0x81, 0x8040) 19:30:02 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fb2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x0, 0x2, 0x9, 0x18, 0xffffffffffffffe0}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x1f, 0xa6, &(0x7f0000000100)=""/166, 0x41000, 0x4, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000080)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xa, 0x7fffffff, 0x7}, 0x10}, 0x78) 19:30:02 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000010) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x1000, 0x1000) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/121) 19:30:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) 19:30:02 executing program 1: syz_open_dev$dri(0x0, 0x81, 0x8040) 19:30:02 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5, 0x13, r2, 0xf1000) 19:30:02 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 19:30:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/110, 0x6e) 19:30:02 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x15) mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x100000b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x4000)=nil) 19:30:03 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x402800, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x202000, 0x0) 19:30:03 executing program 1: syz_open_dev$dri(0x0, 0x81, 0x8040) 19:30:03 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x8040) 19:30:03 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0, 0x2, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x11) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, [], 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) shmget(0x1, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x100, 0x40, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7af}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x2, 0x0, 0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040051}, 0x80d2) 19:30:03 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r1, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0xfffffffffffffffc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x80) 19:30:03 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xf8, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x20044085) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x2e9, 0x0, 0x8, 0x8, 0x1f]}, @SEG6_ATTR_ALGID={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048015}, 0x800) 19:30:03 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x8040) 19:30:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x600000, 0x0) mmap$fb(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r1, 0xf7000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x200008d0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r3, 0x10, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:03 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x1010, 0xffffffffffffffff, 0x1a000) 19:30:03 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x100, 0x40c880) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x0) 19:30:03 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xff, 0x6, 0x9e, 0x4, 0x0, 0x3, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x1000, 0x522, 0xff, 0x7, 0x40, 0xffff, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0) mmap$perf(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x8001) 19:30:03 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x8040) 19:30:03 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0x6, 0x4, 0x3ff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x801) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:03 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20080, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)=',,%/#+\'\x00') mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:03 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:30:03 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x0) 19:30:03 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x3) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) 19:30:03 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 19:30:03 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x0) 19:30:03 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1b5443, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x2010, r0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', 0xffffffffffffffff) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:03 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 19:30:03 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x321200) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:03 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0x6, 0x4, 0x3ff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x801) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:03 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf250000000005001200430000000800110001000000140008007465616d5f736c6176655f30000000000c001600070000000000000006000e00080000000c00160008000000000000000500070003000000050021000000ffffffff070003000000"], 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x10000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:03 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x0) 19:30:03 executing program 3: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x6a00, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:03 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 19:30:03 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x2, 0x8, 0x14, "1c434c92d07d8ba130e6aede020ba66d83ec150427f0577f5581e0564bdd9204198e8bccc44c4e8fef6123cd10e47bf430a4ac0e55bf3d5c6e0a4c14229b27f6", "9dea25f066b09e935a19f60417fdca1dd935ae1e80ed4cb8e3aa8b35f4c29b018c335b8f1c2b0806a6a339a051b0a9421d8b69775c69e2df449709025d91fdb3", "1b9f41e3e8572b8ced3e7ea06469006676e44e7a3fd0e27cece2da8d6822d53f", [0x9, 0x6]}) 19:30:03 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf={0xc7, &(0x7f0000000100)="99faa0f833bf239a06a10c8a3797f5d686f7dfc49ec12459fd862e9429adf2285d71508ef6c39cbb23f2c356b6a35003707b11356ce60c4b884bc6913eaf2f23c5e2f1d5a8c142b0fd3465feb3bed399b64b1c612112c8a6c96380f804f5ad61701fd81ba9fa29972bab5999d36f3317d8ed9a346a339b5e18b2feda03307647eab2bab187c88e9abbc947eecd67d3600a79c34d18e6f6ee74d2d2ebc7f75dc180ce909ff7b600346f51294e34d5a2ac38228699f809855c687df9dd345ddb11385172ee8f35c8"}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 19:30:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/dev/fb0\x00'}, 0x30) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 19:30:03 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/mnt\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1407, 0x401, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20008810) r3 = userfaultfd(0xc0800) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r4 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r5, &(0x7f0000000100)={0x7, 0x1, 0x7fffffff, 0x4}, &(0x7f0000000140)) r6 = userfaultfd(0x800) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x111000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9400000068f0ff030ad4c37000ffdbdf25020003000400000008000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES64=r7, @ANYBLOB="08000500", @ANYRES32=r8, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="2c00020001000000e800000002000000ff20000001000000ff0000000100000009000000000000000300000008000500", @ANYRES32=0x0, @ANYRESDEC=r1], 0x94}}, 0x4000800) 19:30:04 executing program 3: sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) socketpair(0x22, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff3000/0xd000)=nil, 0xd000}, &(0x7f0000000080)=0x10) 19:30:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x40010, r1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffe0, 0x88440) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:04 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, r0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:04 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x40000, 0x0) 19:30:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:04 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:04 executing program 5: sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000040)=0x182) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffa000/0x1000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000040)) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newrule={0x68, 0x20, 0x20, 0x70bd2d, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xda, 0x3f, 0x0, 0x0, 0x8, 0x8000}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x401}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @broadcast}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000814}, 0x54) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}}) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x228080) getresuid(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x4) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:04 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, r0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:04 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xffff070000000000) 19:30:04 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r2, 0x83000000) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 19:30:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x4}) 19:30:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) remap_file_pages(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x2000001, 0x0, 0x80000) 19:30:04 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:04 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, r0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:04 executing program 3: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x1402, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x4000800) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8a20f0220f396612, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r1, 0x97000) 19:30:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x40, 0x0) 19:30:04 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r2, 0x83000000) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 19:30:04 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, r0) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, 0xffffffffffffffff, 0x100000000) 19:30:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:04 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x0) 19:30:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:04 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r2, 0x83000000) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 19:30:04 executing program 2: pkey_alloc(0x0, 0x2) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0x2, 0x7, 0x5, 0x6, 0xfffffffffffffffc}, @generic={0x0, 0x8, 0xb, 0x1, 0x7f}, @alu={0x7, 0x0, 0xc, 0x9, 0xb, 0xfffffffffffffff8, 0x10}, @exit, @ldst={0x3, 0x0, 0x1, 0x8, 0x9, 0x20, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x70, &(0x7f0000000100)=""/112, 0x41100, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x10, 0xa856, 0x8}, 0x10, 0xffffffffffffffff, r1}, 0x78) 19:30:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:04 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xc0000, 0x0) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r0, 0xae000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x50, r1, 0x0) 19:30:04 executing program 2: pkey_alloc(0x0, 0x2) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:04 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r2, 0x83000000) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 19:30:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4100, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:04 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x531d02, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:04 executing program 1: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, 0xffffffffffffffff, 0xa2000) 19:30:04 executing program 2: pkey_alloc(0x0, 0x2) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:04 executing program 0: sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf250e0000000c00060003000000030000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x50040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x4a7, 0x80000000, 0x81]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x227d}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x1e5, 0x9]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8810}, 0x5) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 19:30:05 executing program 1: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, 0xffffffffffffffff, 0xa2000) 19:30:05 executing program 5: r0 = socket(0x4, 0x6, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x20a442, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0) 19:30:05 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r2, 0x83000000) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) 19:30:05 executing program 3: socketpair(0x10, 0x6, 0x400, &(0x7f0000001600)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70002ff0d1d9fe"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x8014) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000004300)={'wg2\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000043c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x4008010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 19:30:05 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0xb00, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4) 19:30:05 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0xffffffffffffffff) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:05 executing program 1: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, 0xffffffffffffffff, 0xa2000) 19:30:05 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r2, 0x83000000) 19:30:05 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x11, r0, 0x0) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x2, 0x12}) 19:30:05 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x360000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:05 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:05 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, 0xffffffffffffffff, 0x83000000) 19:30:05 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf={0x31, &(0x7f0000000000)="74bd53948f90e5d848843d1843a2b0a3c57c050b9e74cc5117aff38e9a22346c98f4757431cb535aece82f81f4ca00f409"}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:05 executing program 5: userfaultfd(0x80000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000000ffff00"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000010000c0080200002b6a8c6dd22d868200534b15bc2ed1a45972c6684080bba16afcf27956beef5eb9914cd346a05bb41bcad15effd5a62d644a93bed289008b32a1eadf3e94eae0"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:05 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200000, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x100000a, 0x4000010, r0, 0xfe000) 19:30:05 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:05 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, 0xffffffffffffffff, 0x83000000) 19:30:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:05 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0xa01402, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:05 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x83000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:05 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:05 executing program 5: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:05 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2b0901, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000b, 0x10, r0, 0x0) 19:30:05 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, 0xffffffffffffffff, 0x83000000) 19:30:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:05 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x286}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) 19:30:05 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:05 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x490000, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r1, 0x83000000) 19:30:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:05 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x11013, r0, 0x0) 19:30:05 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r1, 0x83000000) 19:30:06 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:06 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x101041, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_bcm(r1, &(0x7f0000003680)={&(0x7f00000024c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002540)=""/42, 0x2a}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/88, 0x58}, {&(0x7f0000003600)=""/42, 0x2a}], 0x4}, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003d40)={'syztnl1\x00', &(0x7f0000003cc0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x8, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, [], 0x1}, 0x40, 0x700, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003e80)={'ip6tnl0\x00', &(0x7f0000003e00)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x9, 0x7, 0x10, @mcast2, @mcast1, 0x700, 0x8, 0x7, 0x1ff}}) sendmsg$nl_route(r2, &(0x7f0000004040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x88402}, 0xc, &(0x7f0000004000)={&(0x7f0000003ec0)=@RTM_NEWMDB={0x118, 0x54, 0x14, 0x70bd27, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x1, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@mcast1, 0x8add}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x25}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x1, {@ip4=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x2, {@ip4=@multicast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@in6_addr=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x4, {@in6_addr=@ipv4={[], [], @loopback}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x2, {@ip4=@remote, 0x86dd}}}]}, 0x118}}, 0x4008080) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="ff000065f73d2eecf489fe985d0043ef00d7f086bbf6019f04e220000000000000dbdf25020000000800020012000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:06 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r1, 0x83000000) 19:30:06 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) sigaltstack(&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:06 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000040)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/166, 0xa6}, {&(0x7f0000000180)=""/167, 0xa7}], 0x2, &(0x7f0000000280)=""/104, 0x68}, 0x160) 19:30:06 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:06 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil}) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r0, 0x8000) 19:30:06 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:06 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0xa2000) 19:30:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x8000) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:06 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:06 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:06 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=""/173, 0xad}}, 0x10) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:06 executing program 0: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xa2000) 19:30:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4043000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82240, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 19:30:06 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:06 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdr={0x68, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x3f, 0x18}, [@IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @multicast1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20008810) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:06 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xa2000) 19:30:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40040) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x7, 0x4082) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffa000/0x1000)=nil}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0001fcdbdf2504000000080002000700000000000000bde7e4ed1ad4b61a885d326e82273da94a287716be19686da635026b9bfc99e98829"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000440)=@buf) 19:30:06 executing program 4: r0 = syz_open_dev$sndpcmp(0x0, 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8b05cd6fa1e332b1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xa2000) 19:30:06 executing program 0: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000001) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc814}, 0x20000000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10010, r1, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:06 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:06 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000)) 19:30:06 executing program 4: r0 = syz_open_dev$sndpcmp(0x0, 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xa2000) 19:30:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xffff, 0x4149, 0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0xce]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:07 executing program 4: r0 = syz_open_dev$sndpcmp(0x0, 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r4, 0x4c000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) getpid() ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:07 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:07 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0xcc001, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000086cb128cd78bae5c2470ed11311114a1a14e32d9953b1829360b47a2a1247519b2cf369f8907d1a375d3a9cbd05a0bbd89360faa4eb3998434660d41b33f1562f64d", @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf250100000014000200776730000000000000000000000000001400020077673100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 19:30:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xa2000) 19:30:07 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:07 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = fork() mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0x1, @tid=r1}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:07 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@can}}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000e, 0x1010, r0, 0x0) 19:30:07 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xa2000) 19:30:07 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r3, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2100, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$snddsp_control(&(0x7f0000fec000/0x14000)=nil, 0x1000, 0x0, 0x50, r1, 0x83000000) 19:30:07 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:07 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xa2000) 19:30:07 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x40010, 0xffffffffffffffff, 0x0) mmap$snddsp_control(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5, 0x10, 0xffffffffffffffff, 0x83000000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x3) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xf, 0x4000010, r1, 0x26000) 19:30:07 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:07 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:07 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x29, 0x4, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r1, 0x100000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:07 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 19:30:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = socket(0x25, 0x6, 0xfff) recvmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/57, 0x39}], 0x1, &(0x7f0000000140)=""/161, 0xa1}, 0x12103) 19:30:07 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:07 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x400081, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000008721159f7749f67dd306f34bf3a7336535659432b0bccc1e20a87b9c9c8ab39e574aa625481200c3ab1fd40e6ff3d85ec82c98d9a2f0989d187c797b75cf874ac3e9cd5352e6efc573e06a9da0cdf382500ee4b25f2bc9c66b27fe72a43b203e5f195e30bcdf034105c5c082492c3110dbd10681a17d311187f7a9322859cf640fc4479b86c5685c46e71276f699069f7128198cf28322a0d1e81a2eb98dd282bd0cc61ebfa73844284d63a156a7f253736dafc04ffc377fc40bc384cecbb92fb6c6f6394122dd30b17ae37b694a11952d130fb0b4655f92c0daa1cca5", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2f, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044810}, 0x40000) 19:30:07 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x7, 0x80200) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/104) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:07 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x1010, r0, 0x83000000) 19:30:07 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xa00, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x2, 0x4, 0x5}) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) 19:30:07 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) 19:30:07 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:07 executing program 3: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x1000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x0, 0x70bd27, 0x25dfdbfd, {0xa, 0x80, 0x14, 0x1, 0xa3, 0x0, 0x0, 0x4, 0x10013}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x4840) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$snddsp_control(&(0x7f0000ffa000/0x2000)=nil, 0x1000, 0x1, 0x810, r1, 0x83000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 19:30:08 executing program 5: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x6, 0xc, 0x24, "1bd9e1f0b54731b441a8f4b8a72028d07b2eea19a701b5634bf49449f92d7fa4ffe4ce8cfc59c6e68c0f3a6135da18ba4548994cf47bc302a7850f3c3831bb49", "231d0c027b7b0fb2c6f7d27c18551b6769d601f0938df32018f39babf474c38f53e70390268988aa026252723aed533852ef8db8d9c1b518967501d1045c5e74", "c20b9d2271ee2f125e2fc9a6b98ee80c0cdaaa9f16ff5e27ca66d65e75c06694", [0x800, 0x3f]}) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82a01, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x10001) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:08 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000) 19:30:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2, 0x1, 0x44}) 19:30:08 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 19:30:08 executing program 3: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 19:30:08 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000) 19:30:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:08 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) recvmsg(r0, &(0x7f0000001400)={&(0x7f0000000040)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/206, 0xce}], 0x3, &(0x7f0000001300)=""/206, 0xce}, 0x100) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:08 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x10010, r1, 0xda000) 19:30:08 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x12) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000d6f000/0x3000)=nil, 0x400000}, &(0x7f0000000080)=0x97) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:08 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000) 19:30:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:08 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x84280, 0x0) mmap$perf(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x5110, 0xffffffffffffffff, 0x80) 19:30:08 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:08 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x3000) 19:30:08 executing program 1: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 19:30:08 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x147, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000) 19:30:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000100)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) socket$xdp(0x2c, 0x3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x74abf5b0) 19:30:08 executing program 1: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 19:30:08 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="bb7cd63c48d87de7d89a680e00dca8df17f7da23e32a5a39aba12b5f340fef12071c81b294d115b8b19ca9a6e2fd9ccf50a1bfedd5660ce7f6f08bd657e55e1a840d130fb554d84c82998e6110078588f956da0e51439d7917ecbdc44dc421e4ad1dfdba2bf544cd6ef8890c7a768338a7166697f74e59bc0c720721dcccacee3fbe9429d56df4bb4a3a3e4c3b7ecb1c640556342625", @ANYRES16=r1, @ANYRES64=r1], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d000000a6109c307e6d8be195b6b31ec80d337a030640c338b5a2377c845cde3b16670ed6c30ecbcb31f52c3721bc8d3709000000b3140800420e3f9640f945fcc98695e900"/79, @ANYRES16=r1, @ANYBLOB="08002cbd7000fedbdf250300000008000300860000000500060004000000100004000300000009000000d40600000c0004000400000007000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40814) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x2, 0x2, 0x1, 0x0, 0x1, 0xc, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x101, 0x75, &(0x7f0000000280)=""/117, 0x41100, 0x11, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xd, 0x3ff, 0x22aa0fd1}, 0x10}, 0x78) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:08 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 19:30:08 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:08 executing program 1: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 19:30:08 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xe8e59d0890382b1f, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x101, 0x200001) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil}) 19:30:08 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x38}}, 0x8044) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:08 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', 0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x2d4b) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa308, 0x9, &(0x7f0000000000)=0x1) mmap$fb(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2000009, 0x10, r1, 0xfe000) 19:30:08 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000100)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) socket$xdp(0x2c, 0x3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x74abf5b0) 19:30:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:09 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 19:30:09 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0x810, 0xffffffffffffffff, 0xa2000) 19:30:09 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xb4, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9b950bacedf261d4ff7011f36666edd3e449d13d1e5e2aaf65389f06acdc3472"}]}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a9cc4f08257dc3c94086db76732f0b037d39b2c362ef927ef27b9e481406998"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cf71ef259243c89442fe2f86fa7e4706"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48080}, 0x40) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) 19:30:09 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xa000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x410200, 0x0) connect$can_bcm(r1, &(0x7f0000000040), 0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:09 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 19:30:09 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000100)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) socket$xdp(0x2c, 0x3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x74abf5b0) 19:30:09 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1ff}, 0x8) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x204740, 0x0) 19:30:09 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x60000) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) 19:30:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:09 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 19:30:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:09 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'sit0\x00', 0x0, 0x29, 0xe8, 0x9, 0x9, 0x10, @private0={0xfc, 0x0, [], 0x5}, @ipv4={[], [], @multicast1}, 0x8, 0x700, 0x0, 0x1}}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x4008810) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x1, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000000380)='/dev/urandom\x00'}, 0x30) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x906, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}}, 0x8000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r3, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) 19:30:09 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', 0xffffffffffffffff) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xb8000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7ff) r2 = socket(0x2c, 0x480f7ff9ef9706ed, 0x3) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x792, 0x3, 0xa9, 0x0, 0x1]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x44}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x33}}]}, 0x50}}, 0x8081) 19:30:09 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000100)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) socket$xdp(0x2c, 0x3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x74abf5b0) 19:30:09 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0x0) 19:30:09 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x58a41, 0x0) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000009, 0x2010, r1, 0x10000000) 19:30:09 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) 19:30:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:09 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000100)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) socket$xdp(0x2c, 0x3, 0x0) 19:30:09 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0xfffffffffffffff7, 0x4}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x810, r0, 0x82000) 19:30:09 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4800, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000006, 0x10, r1, 0xec000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:09 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:09 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:09 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x440342, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:09 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x100, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}, &(0x7f00000001c0)=0x10) mmap$fb(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x105010, r1, 0x6a000) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x302, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x884) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x3, 0x80100) 19:30:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000100)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:10 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r2 = getpid() r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r1, 0x609, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x800001, 0x13, r5, 0x0) 19:30:10 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 19:30:10 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) 19:30:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000240)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xff000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000000)=0x1ff800) 19:30:10 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 19:30:10 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$xdp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x30, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc, 0x810, r1, 0x1000) geteuid() 19:30:10 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc, 0x50, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5000001, 0x10, r0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 19:30:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x24004000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x84080, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) 19:30:10 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x63}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}]}, 0x30}}, 0x20000000) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x7) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x20010, 0xffffffffffffffff, 0x8) socket(0x1, 0x4, 0xffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x2aad81a280f55b9e, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) 19:30:10 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200800, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c35b6f2", @ANYRES16=r3, @ANYBLOB="000829bd7022db62602428ba0200000028fbbae6e700"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4002010) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x1010, r1, 0xf0000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 19:30:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 19:30:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:10 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x801, 0x0) 19:30:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 19:30:10 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:10 executing program 3: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) r7 = socket(0x21, 0x80000, 0x5) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001780)='l2tp\x00', r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="04002abd7000fddbdf250100000014001f00fe80000000000000000000000000002f06000300000000000c00160009000000000000000800190000000000080019000000000008001700", @ANYRES32=r2, @ANYBLOB="1400000076657468305f746f5f627269646765000c00160009000000000000001400080076657468315f746f5f626f6e6400000006000e0006000000"], 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x95000) 19:30:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 19:30:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:10 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x80010, r0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 19:30:10 executing program 3: r0 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x31}, @void, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2d}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000050}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x31, 0x0, 0x50, 0x11, @remote, @loopback, 0x8000, 0x9, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08deffc0f3e98752de7f88441d4915773c0600", @ANYRES32=r1, @ANYBLOB="0800050000100000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x8001) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0)='wireguard\x00', 0xffffffffffffffff) mq_notify(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x34, 0x4, @thr={&(0x7f0000000580)="9b416209f5b2b71101fe38981a66119a48e154dfa4a8e529b0aeccf0b70b04723c830b094ff4e47504fde4323b691fe7298c459a84e87e3630e6ed9d62fcf4b84c84a48bfadca0978b50da8341344c6f08e124f786061d0ff0b7b0bd0f5827af4fd6e0bfe7b26c8c7e90a724b922ce2f771006e67d8da81a7dfaa9a0cb2d9a7d7837495fa9175d41a5b415b2d90f6672f7ee13deb9cb7edf234f47d75da0ce", &(0x7f0000000640)="a3b0d221a8932639ec33f2b87f9799219f25fbc72f3d04938dcc9b1c59d7491a417362a7be1a266f995c1a19ee8e591e1b04c4deb81a14fc6b98e1726426df55a1c00fc91fc1468fc5b374a705de125c0df7cf65417e5b99c6"}}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r5, &(0x7f0000000340)={0x3, 0x3, 0x6, 0x5}, &(0x7f0000000380)) 19:30:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 19:30:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:10 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r2, 0x100000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 19:30:11 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:11 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) 19:30:11 executing program 0: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4a}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffa8c}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffff27b, 0x40, 0x200]}]}, 0x4c}}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 19:30:11 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x202880, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r1, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=""/222, 0xfffffffffffffef3}}, 0x10) 19:30:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r2, 0x100000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:11 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1c, 0x0, 0x6, 0x2, 0x157a, 0x1, 0xc8d, [], r1, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 19:30:11 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:11 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x100010, r0, 0xe6000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x40, 0x0) 19:30:11 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80040, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)) 19:30:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r2, 0x100000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:11 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:11 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x75d8ef66ea517095, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x20050, r1, 0x100000001) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0xc050}, 0x40094) 19:30:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0xc1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:11 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000080)=0x85) mq_getsetattr(r1, &(0x7f0000000000)={0x2, 0xac, 0x9, 0x7}, &(0x7f0000000040)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r2, 0x100000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:11 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x10000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:11 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:11 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0xffff, 0x4, 0xa5}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x400000, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x40180, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3512000b9823954c1010cc2b56390500000000007fffbec93a6587d98367f7f1c2cc9e6ad669f7589a65c2bb96f7c0aa99fca74fb962649d3fdc275321a79c3104f365d7488d8b0ecae3c4489caeeebf257da589db93ac60b708a3093c7764ed", @ANYRES16=r4, @ANYBLOB="01002dbd70002ff0d1d9fe"], 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x806, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0xffffffffffffffe0, 0x2}) 19:30:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x9) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:11 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40a01, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:11 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:11 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:11 executing program 5: socketpair(0x8, 0xa, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000)) 19:30:11 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x10e101, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) r4 = fork() r5 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETNSID={0x34, 0x5a, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24040080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:11 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) 19:30:12 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:12 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:12 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x9, 0xfc, 0x5, 0x0, 0x100, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000040), 0xd}, 0x1, 0x8, 0x8, 0x2, 0xfffffffffffffffc, 0x7fff, 0x7ff}, 0x0, 0x5, 0xffffffffffffffff, 0xa) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:12 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) mmap$fb(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x2000000, 0x12, r1, 0xa0000) 19:30:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:12 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:12 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:12 executing program 0: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0x5, 0x0, 0x110}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0xc300, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x80, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x210080, 0x0) 19:30:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x48848) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x848) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) 19:30:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:12 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:12 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x6, 0x4, 0xfffeffff, 0x117]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf250c0000000c000600030000000000000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b6152fda74044b00de149b6215595c000041bf3e206f40df17090b20e0b811fec46349d366317a888c1ada67e9e9274ed78aad2c3d9631b3a28152769cfac5911c28fb00"/80], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 19:30:12 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 19:30:12 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) fork() mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:12 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:12 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:12 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x5, 0x10000042, 0x9, 0x5, 0x1, 0x8001, 0x1, 0x7, 0xfffff2ca}, 0x0) socketpair(0x2c, 0x4, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x42}, @void, @val={0xc, 0x99, {0x9, 0x21}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4008040) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) r4 = fork() sched_rr_get_interval(r4, &(0x7f0000000280)) syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1, 0x0, 0x25, 0x4, 0x0, 0x81, 0x10284, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xbc, 0x1, @perf_config_ext={0x6, 0x5}, 0x820, 0x3, 0x1, 0x0, 0x3, 0x9, 0x7f}, 0xffffffffffffffff, 0xd, r3, 0xa) 19:30:12 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:12 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x5, 0x2, 0xff, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x40010, r1, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:12 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:12 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:12 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x24ca00, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0xc40, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x401070c9, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000100)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x2000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0x20010, r1, 0x47000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000006, 0x1010, r2, 0x48000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000015c0)={'ip6_vti0\x00', &(0x7f0000001540)={'sit0\x00', 0x0, 0x4, 0x7, 0x6, 0x1, 0x44, @remote, @private2={0xfc, 0x2, [], 0x1}, 0x1, 0x700, 0xd3, 0x80000000}}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000016c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000001800)=""/137, 0x89}, {&(0x7f00000018c0)=""/40, 0x28}, {&(0x7f0000001900)=""/244, 0xf4}, {&(0x7f0000001a00)=""/255, 0xff}], 0x5}, 0x40012021) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000020c0)={'syztnl1\x00', &(0x7f0000002040)={'sit0\x00', 0x0, 0x29, 0x7, 0x9, 0xfffffff9, 0x47, @private2, @mcast2, 0x700, 0x8000}}) sendmsg$nl_route(r3, &(0x7f0000002240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000084}, 0xc, &(0x7f0000002200)={&(0x7f0000002100)=@RTM_DELMDB={0xd8, 0x55, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@ip4=@loopback, 0x436e}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0xc30fd61fe553959, 0x1, 0x3, {@ip4=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x3, {@ip4=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@mcast2, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 19:30:12 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:13 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:13 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3ff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0x8) 19:30:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 19:30:13 executing program 0: geteuid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x8) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:13 executing program 1: mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:13 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r1, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:13 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x84082, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x13, 0x2, 0x800, 0x8, @private0={0xfc, 0x0, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x1, 0xeb58, 0xffff}}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0xfffffffffffffffc) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a690213ba8015f3f7280b01f892eb5081bac498a4e553e6e5bd5465795131496f8bdcd837c734da48aa711520e04769a816951dcc7626d2c4f1098a886cbd4adc4e460b96a51eb2f946d", @ANYRES32=r3, @ANYBLOB="0c000700994353a13525f30bdc3f1b238e38058fc69c1b14a2439c12b6ebe2f1e043483bacaa7edd4252", @ANYRES32=r1, @ANYBLOB="080009000400000008000700", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000006}, 0x8844) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) 19:30:13 executing program 1: mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:13 executing program 5: socket(0x10, 0x2, 0xfce2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:13 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x4000, 0x0) mmap$fb(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0xed000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xe, 0x4010, r2, 0x0) 19:30:13 executing program 1: mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', 0xffffffffffffffff) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x40010, 0xffffffffffffffff, 0x0) 19:30:13 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:13 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:13 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0xc6ce, 0x20000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x31000) 19:30:13 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x4000, 0x0) mmap$fb(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0xed000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xe, 0x4010, r2, 0x0) 19:30:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:13 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:13 executing program 3: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r1 = socket(0x23, 0x2, 0x2000000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0xb01, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 19:30:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000001, 0x13, r0, 0x0) 19:30:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x50000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0xf34346d3e7ae5527, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x44080, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x288900, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fedbdf25020000000600060004000000080017000400000008000500ac1414aa08000400000000000c0003000300000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4020) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008090}, 0x800) 19:30:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf250c0000000c000600030000000000000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b6152fda74044b00de149b6215595c000041bf3e206f40df17090b20e0b811fec46349d366317a888c1ada67e9e9274ed78aad2c3d9631b3a28152769cfac5911c28fb00"/80], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 19:30:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x40010, r0, 0x4000) 19:30:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:14 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:14 executing program 5: ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:14 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', r0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x42100, 0x0) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getrule={0x1c, 0x22, 0x1, 0x70bd2c, 0x25dfdc00, {0xa, 0x80, 0x34, 0x20, 0x7, 0x0, 0x0, 0x6, 0xb}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40025}, 0x8041) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=""/93, 0x5d}}, 0x10) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c, 0x810, r1, 0x20000) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x1, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x50, r3, 0xe2000) 19:30:14 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 19:30:14 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r1 = socket(0x23, 0x2, 0x2000000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0xb01, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 19:30:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:14 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:14 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0xfff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:14 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:14 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r1 = socket(0x23, 0x2, 0x2000000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0xb01, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 19:30:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:14 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1c1800, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x50, r1, 0x64000) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x68e6) prctl$PR_SVE_SET_VL(0x32, 0x18f4f) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x400220) 19:30:14 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) sigaltstack(&(0x7f0000ff9000/0x3000)=nil, 0x0) 19:30:14 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3a, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000200)=""/253, 0x2b, 0xfd}, 0x20) 19:30:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:14 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r1 = socket(0x23, 0x2, 0x2000000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0xb01, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 19:30:14 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xc0a01, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x110, r0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x2000)=nil) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) 19:30:14 executing program 0: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x9fc76fa9a89cc0c4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001980)={'syztnl2\x00', &(0x7f0000001900)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x8, 0xd1, 0x21, @dev={0xfe, 0x80, [], 0x39}, @empty, 0x1, 0x8000, 0x10000}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, r0, 0x308, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:14 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:14 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x446280, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff6000/0x7000)=nil, 0x7000}, &(0x7f0000000040)=0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:14 executing program 5: mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xdc3eb24d80cc84e6, 0x810, 0xffffffffffffffff, 0x6c000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x0) 19:30:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x10203, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0x0) 19:30:14 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:14 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:14 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) socket(0x23, 0x2, 0x2000000) 19:30:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) socket(0x0, 0xa, 0x3f) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0xda000) 19:30:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x38, 0x8, 0x0, @loopback, @loopback, 0x10, 0x87, 0x5, 0x7}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x80000, 0x0) socket$l2tp(0x2, 0x2, 0x73) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:15 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x10000, 0x0) mmap$dsp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000b, 0x13, r0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) 19:30:15 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:15 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) socket(0x23, 0x2, 0x2000000) 19:30:15 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r1, 0x4000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:15 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x800, 0x0) 19:30:15 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socket(0x23, 0x2, 0x2000000) 19:30:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:15 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r1, 0xb3000) 19:30:15 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) socketpair(0x2a, 0x5, 0x3f, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x9fc76fa9a89cc0c4) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x885) 19:30:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:15 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x609}, 0x14}}, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200040, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x6, 0x11, r3, 0x8000) 19:30:15 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) socket(0x23, 0x2, 0x2000000) 19:30:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:15 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4c041) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:15 executing program 3: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:15 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:15 executing program 2: socket(0x23, 0x2, 0x2000000) 19:30:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x5, 0x400000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x8201, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x2010, r1, 0xb7000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000cb7000/0x4000)=nil, 0x4000}, 0x3}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) 19:30:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r4, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0)='nl802154\x00', r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20000040) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x254, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0e1f78157d4edbee17543946e06ee34e"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xe4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "34c2d5c4dc0c0fd838d3d4c9499c10fa"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c40ac98f9c1a4263c73c39d0dcbcbcc5"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "32b5007d4a254088987d6fe3c1952f9e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "04d8ca312adfc687bb39148f8ee5a9fb"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6328fa49d9146a4ad106e2d599d5d1649ceac0cfa492c341222f54d62a753fa5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "20bbc05e9c4a5a5fc456e51db56fd87d2ac30c1d4c0d379279ff0a0e79c8b83c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4f404b0df2e2204d057b3c5095f8e0a2"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x108, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6b1a3ef592c8e1bb78652bc7cabf4876ab3aeb50d57b8d9080d37e70c2f75b8e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "962c689cc6383f552670158005c7b5cafa84d5279e38fcfcdb7cf2f950d8a2c5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "32efebff69ca7c17457a185f0110cf205374372f32defcff755142318179674c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "450f363efef1443a0884c4abfc1d7d8d"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1b852518}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "66eddf9dd40d8e8b6bc23b159658d4aee7e223e6a108eb21f9d344c2967e0e2e"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x254}}, 0x20000001) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}}, 0x8c1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000190000e7b8769b9692dc0229bd7000fedbdf25801020010000fd080001000008000b0000020000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 19:30:15 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_delroute={0x24, 0x19, 0x100, 0x70bd2a, 0x25dfdbfb, {0x80, 0x14, 0x20, 0x1, 0xfc, 0x3, 0xc8, 0xb, 0x2d00}, [@RTA_PRIORITY={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0xd0) 19:30:16 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:16 executing program 2: socket(0x0, 0x2, 0x2000000) 19:30:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 19:30:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x100200, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0xb5000) 19:30:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 19:30:16 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x400000, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x80000000) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff) 19:30:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 19:30:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000640)='/dev/cachefiles\x00', 0x8080, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000680)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) 19:30:16 executing program 2: socket(0x0, 0x2, 0x2000000) 19:30:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x0) 19:30:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 19:30:16 executing program 3: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x800, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x40010, r1, 0x72000) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000b40)='trusted\x00', &(0x7f0000000b80)={'syz', 0x2}, 0x0, 0x0, r2) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/239) keyctl$search(0xa, r2, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000b40)='trusted\x00', &(0x7f0000000b80)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$negate(0xd, r3, 0x400, r4) 19:30:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 19:30:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 19:30:16 executing program 2: socket(0x0, 0x2, 0x2000000) 19:30:16 executing program 0: mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="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", 0x162, 0x4000000, &(0x7f0000000040)) timerfd_create(0x1da7de5cf7298a0e, 0x800) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 19:30:16 executing program 3: r0 = fork() getpgid(r0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_delneigh={0x2c, 0x1d, 0x1, 0x0, 0x0, {}, [@NDA_VNI={0x8}, @NDA_DST_IPV4={0x8, 0x1, @private}]}, 0x2c}}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x4a0000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xc000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 19:30:16 executing program 2: socket(0x23, 0x0, 0x2000000) 19:30:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:16 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:16 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1800002, 0x2010, r0, 0x0) 19:30:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x10000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x80000) 19:30:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:16 executing program 2: socket(0x23, 0x0, 0x0) 19:30:16 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x9, 0x80010, 0xffffffffffffffff, 0x3) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:17 executing program 0: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', 0xffffffffffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x83000000) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x24008140) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x502, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x30681, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 19:30:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:17 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000004, 0x20010, r0, 0xdc000) 19:30:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:17 executing program 2: socket(0x23, 0x0, 0x0) 19:30:17 executing program 3: syz_open_dev$loop(&(0x7f0000001400)='/dev/loop#\x00', 0x1, 0x10000) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/137, 0x89}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/139, 0x8b}], 0x4, &(0x7f0000001340)=""/104, 0x68}, 0x40000001) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001440)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/cachefiles\x00', 0x4000, 0x0) r3 = fork() syz_open_procfs$namespace(r3, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = fork() prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff2000/0xe000)=nil) syz_open_procfs$namespace(r5, 0x0) r6 = fork() sendmsg$nl_route(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYBLOB="540000005800010025bd7000fbdbdf250008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="c2c26c00824c7ecf3ac30ae84354a7ac9f98fca81c4a84c7ad64c5ce9cf9b5f66d821d727009db1267b1251b71a1a38f927f1dc77d9a65a05857b66c2b1e0909f50a9936ab085c6e418ade1922ead750cdfee16b3c7c782c3f4c29c8ce02000000b164688b07a8f35ee90739dd8251f0575f7313e642607ca836a01e550d397d5a466bd04532f5c48971611601f7cdf1000000000000", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x8d0}, 0x1) 19:30:17 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x0) 19:30:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000004, 0x4000010, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, r1, 0xc3000) 19:30:17 executing program 2: socket(0x23, 0x0, 0x0) 19:30:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:17 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x3, 0xa, 0x15, "fc169713abe42fcc4c760570bb1b549edd663feb7733d09c5d8100debdcd29aea05bb7fb593ec7555c9cf9dbbd78cd2536c68bb18d420d43e17746017f17cace", "f5a90c7ee473abefff97c00ad771908c9d6654a2194e2a5ef950d140b047a50261218141d2a1b79efc5983d90110876f094902dfec490ec39c778fc7cb1fadef", "953a3139815d97173774aef4a46e687a39f95ebdce478cca61a51fd82c89fcdf", [0x6, 0x8]}) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x60, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x4) 19:30:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x200008d0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0x10, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x20040011) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) setns(0xffffffffffffffff, 0x40000000) 19:30:17 executing program 2: r0 = fork() getpgid(r0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_delneigh={0x2c, 0x1d, 0x1, 0x0, 0x0, {}, [@NDA_VNI={0x8}, @NDA_DST_IPV4={0x8, 0x1, @private}]}, 0x2c}}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x4a0000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xc000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:17 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x100000d, 0x80000000, 0x100) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@del={0xe0, 0x11, 0x200, 0x70bd2c, 0x25dfdbfe, {{'drbg_pr_sha512\x00'}, [], [], 0x0, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4081}, 0xca752bc16bba4206) 19:30:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:17 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) 19:30:17 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) socketpair(0x27, 0x4, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x39}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10010}, 0x4) 19:30:17 executing program 2: syz_open_dev$loop(&(0x7f0000001400)='/dev/loop#\x00', 0x1, 0x10000) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/137, 0x89}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/139, 0x8b}], 0x4, &(0x7f0000001340)=""/104, 0x68}, 0x40000001) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001440)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/cachefiles\x00', 0x4000, 0x0) r3 = fork() syz_open_procfs$namespace(r3, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = fork() prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff2000/0xe000)=nil) syz_open_procfs$namespace(r5, 0x0) r6 = fork() sendmsg$nl_route(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYBLOB="540000005800010025bd7000fbdbdf250008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="c2c26c00824c7ecf3ac30ae84354a7ac9f98fca81c4a84c7ad64c5ce9cf9b5f66d821d727009db1267b1251b71a1a38f927f1dc77d9a65a05857b66c2b1e0909f50a9936ab085c6e418ade1922ead750cdfee16b3c7c782c3f4c29c8ce02000000b164688b07a8f35ee90739dd8251f0575f7313e642607ca836a01e550d397d5a466bd04532f5c48971611601f7cdf1000000000000", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x8d0}, 0x1) 19:30:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) 19:30:17 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:17 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0x27, 0x6, 0x9) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000037c0)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:17 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) 19:30:17 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 19:30:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/251) 19:30:18 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000009, 0x810, r0, 0x30000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:18 executing program 1: mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 19:30:18 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:18 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) 19:30:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x300000f, 0x2010, r0, 0x0) 19:30:18 executing program 1: mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 19:30:18 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8f000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000fef000/0x3000)=nil, 0x3000}, &(0x7f0000000000)=0x10) 19:30:18 executing program 1: mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 19:30:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0xa000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 19:30:18 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) 19:30:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:18 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x5000) 19:30:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) socketpair(0x27, 0x4, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x39}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10010}, 0x4) 19:30:18 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 19:30:18 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) 19:30:18 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r0, 0x29000) socket$l2tp6(0xa, 0x2, 0x73) 19:30:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x100000) 19:30:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) socketpair(0x27, 0x4, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x39}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10010}, 0x4) 19:30:18 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 19:30:18 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2c0940, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x5, 0x9d) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00', r1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd70002ff0d1d9fe"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010) 19:30:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:18 executing program 3: mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:18 executing program 0: prctl$PR_SET_FPEXC(0xc, 0x80) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) sendmsg$nl_crypto(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@upd={0xf0, 0x12, 0x100, 0x70bd25, 0x25dfdbfe, {{'xts-twofish-avx\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x10001}, {0x8, 0x1, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x80) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) socketpair(0x27, 0x4, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x39}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10010}, 0x4) 19:30:18 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 19:30:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:19 executing program 3: mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:19 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) socketpair(0x27, 0x4, 0x1, &(0x7f0000000140)) 19:30:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 19:30:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x501, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x59000) shmget(0x1, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) 19:30:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:19 executing program 3: mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:19 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) socketpair(0x27, 0x4, 0x1, &(0x7f0000000140)) 19:30:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 19:30:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x9) 19:30:19 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) 19:30:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) socketpair(0x27, 0x4, 0x1, &(0x7f0000000140)) 19:30:19 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 19:30:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x70, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70002ff0d1d9fe"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8050) 19:30:19 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) 19:30:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 19:30:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) socketpair(0x27, 0x4, 0x1, &(0x7f0000000140)) 19:30:19 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:19 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) 19:30:19 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:19 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xe1ab319719d8ea6a, 0xffffffffffffffff) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x660801, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@get={0xf8, 0x13, 0x300, 0x70bd2b, 0x25dfdbfd, {{'cmac-aes-neon\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0xfffffffc}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 19:30:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 19:30:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:19 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:19 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) 19:30:19 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 19:30:19 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0xef000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x4382, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0xf855, 0x2000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x80000000) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xc4000) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) 19:30:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) 19:30:20 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:20 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x21be, 0x40000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x10001) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000100)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r0, 0xde000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1360}, 0x8) 19:30:20 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) 19:30:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340058135bef9a8279ced87476abc0f6619c5c67b97701000080740000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf250300000018000400090000000200000000000040010000009a12000008000200ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x2404c094) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2c0940, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x5, 0x9d) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00', r1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd70002ff0d1d9fe"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010) 19:30:20 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x99c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5d}, @WGDEVICE_A_PEERS={0x94c, 0x8, 0x0, 0x1, [{0x2f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x30}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}, {0x430, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1f, @empty, 0xf0f}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x390, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x25}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8001, @mcast1, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "edf4e5f33fccb128544bca6ee1c1d6e305b0b3729a12961cbf622fa26e0398f1"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x48cd}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffff9, @private1, 0xf1}}]}, {0x1c8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5ba00a264380233c0b2abe1722fb41c56a85834d0362ff2da563eb436f4ebef9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @mcast1, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @empty, 0xffff9d84}}, @WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x26}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x99c}, 0x1, 0x0, 0x0, 0x8800}, 0x90) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/fb0\x00', 0x4800, 0x0) 19:30:20 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:20 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008801}, 0x40040) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x20000) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x1000)=nil, 0x34f3, 0x1, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000e3c109783dba708e326cf4f7c77ba85d8cf960ae9dc9917d26fa8e2b26c34e7ce11f50bcdb24a5244802badb1d2e89f8c9610a50fd62e7052ee29708c6ac85ea3d2b000000", @ANYRES16=r5, @ANYBLOB="02002abd7000fedbdf251b000000100023800c0004000201aaaaaaaaaaaa"], 0x24}, 0x1, 0x0, 0x0, 0xc042}, 0x4) 19:30:20 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:20 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) 19:30:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) 19:30:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r2) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:20 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, r1, 0x304, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 19:30:20 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000640)='/dev/cachefiles\x00', 0x8080, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000680)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) 19:30:20 executing program 1: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:21 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x10000, 0x0) mmap$dsp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000b, 0x13, r0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) 19:30:21 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x14b241, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:21 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 3: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) socket(0x23, 0x2, 0x2000000) 19:30:21 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3a, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000200)=""/253, 0x2b, 0xfd}, 0x20) 19:30:21 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1c1800, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x50, r1, 0x64000) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x68e6) prctl$PR_SVE_SET_VL(0x32, 0x18f4f) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x400220) 19:30:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='/dev/fb0\x00') syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000000340)='gtp\x00', 0xffffffffffffffff) r2 = fork() syz_open_procfs$namespace(r2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x81, 0x9, 0x2, 0x0, 0x0, 0x2, 0x2000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x3}, 0x4001, 0x4, 0x3be2, 0x5, 0xfff, 0x2b1, 0x3}, r2, 0xc, r3, 0x9) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r4, r3, 0x0, 0x4, &(0x7f0000000380)=',)!\x00'}, 0x30) socketpair(0x25, 0xa, 0xc, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x7, 0xfffffffd]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x75a68132, 0x15, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x60}}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x101) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 19:30:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x14b241, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 4: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r1 = socket(0x23, 0x2, 0x2000000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0xb01, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 19:30:21 executing program 2: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) 19:30:21 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 2: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x6, 0x4, 0xfffeffff, 0x117]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:21 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x6, 0x4, 0xfffeffff, 0x117]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x9, 0xfc, 0x5, 0x0, 0x100, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000040), 0xd}, 0x1, 0x8, 0x8, 0x2, 0xfffffffffffffffc, 0x7fff, 0x7ff}, 0x0, 0x5, 0xffffffffffffffff, 0xa) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x10000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x600482, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xe626, 0x802) 19:30:21 executing program 5: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 2: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:21 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x6, 0x4, 0xfffeffff, 0x117]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:22 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$snddsp_control(&(0x7f0000ffa000/0x2000)=nil, 0x1000, 0x8, 0x4010, 0xffffffffffffffff, 0x83000000) 19:30:22 executing program 5: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x9, 0xfc, 0x5, 0x0, 0x100, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000040), 0xd}, 0x1, 0x8, 0x8, 0x2, 0xfffffffffffffffc, 0x7fff, 0x7ff}, 0x0, 0x5, 0xffffffffffffffff, 0xa) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:22 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x6, 0x4, 0xfffeffff, 0x117]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x13, r0, 0x0) 19:30:22 executing program 5: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 3: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', 0xffffffffffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x6, 0x4, 0xfffeffff, 0x117]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 19:30:22 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) 19:30:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0xe4000) 19:30:22 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) 19:30:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) 19:30:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:22 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) 19:30:22 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) 19:30:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = fork() syz_open_procfs$namespace(r1, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x810, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20002080}, 0x14) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x200008d0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r2, 0x10, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x100, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x33}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xb8, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2b}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x24004040) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) 19:30:22 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) 19:30:22 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) 19:30:22 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', 0xffffffffffffffff) 19:30:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) 19:30:23 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) 19:30:23 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) 19:30:23 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:23 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) 19:30:23 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) 19:30:23 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 4: socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)) 19:30:23 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040845}, 0x4000804) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x1407, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x50) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xf) 19:30:23 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) 19:30:23 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) 19:30:23 executing program 4: socketpair(0x0, 0x3, 0x8, &(0x7f0000000000)) 19:30:23 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) 19:30:23 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:23 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:23 executing program 4: socketpair(0x0, 0x3, 0x8, &(0x7f0000000000)) 19:30:23 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 19:30:23 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) 19:30:23 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 19:30:23 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:24 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:24 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:24 executing program 4: socketpair(0x0, 0x3, 0x8, &(0x7f0000000000)) 19:30:24 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:24 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 19:30:24 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) 19:30:24 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:24 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:24 executing program 4: socketpair(0xf, 0x0, 0x8, &(0x7f0000000000)) 19:30:24 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) 19:30:24 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:24 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:24 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:24 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) 19:30:24 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) 19:30:24 executing program 4: socketpair(0xf, 0x0, 0x8, &(0x7f0000000000)) 19:30:24 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:24 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:24 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) 19:30:24 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) 19:30:24 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:24 executing program 4: socketpair(0xf, 0x0, 0x8, &(0x7f0000000000)) 19:30:24 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:24 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) 19:30:24 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:24 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:24 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:24 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:25 executing program 4: socketpair(0xf, 0x3, 0x0, &(0x7f0000000000)) 19:30:25 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:25 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:25 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:25 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:25 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:25 executing program 4: socketpair(0xf, 0x3, 0x0, 0x0) 19:30:25 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:25 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:25 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:25 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:25 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:25 executing program 4: socketpair(0xf, 0x3, 0x0, 0x0) 19:30:25 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:25 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:25 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:25 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:25 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:25 executing program 4: socketpair(0xf, 0x3, 0x0, 0x0) 19:30:25 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:25 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:25 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:25 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:25 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:25 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:25 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:25 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:25 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:26 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:26 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:26 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:26 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:26 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:26 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:26 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:26 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:26 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:26 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:26 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:26 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) 19:30:26 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:27 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) 19:30:27 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:27 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) 19:30:27 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:27 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:27 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:27 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:27 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:27 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:27 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:27 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) 19:30:27 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:27 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:27 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:27 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:28 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) 19:30:28 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:28 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:28 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) 19:30:28 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) 19:30:28 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:28 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:28 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:28 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) 19:30:28 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:28 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:28 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) 19:30:28 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:28 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:28 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:28 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:29 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:29 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) 19:30:29 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:29 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:29 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:29 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:29 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:29 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:29 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:29 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:30 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:30 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:30 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 5: mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:30:31 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 5: mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:31 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:31 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 5: mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:31 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:31 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 1: mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:32 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:32 executing program 1: mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:32 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:32 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 1: mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:32 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:32 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:32 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:32 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:32 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:32 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:32 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:32 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:32 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:32 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:32 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:33 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:33 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:33 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) 19:30:33 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x208000, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) 19:30:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:34 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0xffff, 0x4, 0xa5}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x400000, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x40180, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3512000b9823954c1010cc2b56390500000000007fffbec93a6587d98367f7f1c2cc9e6ad669f7589a65c2bb96f7c0aa99fca74fb962649d3fdc275321a79c3104f365d7488d8b0ecae3c4489caeeebf257da589db93ac60b708a3093c7764ed", @ANYRES16=r4, @ANYBLOB="01002dbd70002ff0d1d9fe"], 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x806, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0xffffffffffffffe0, 0x2}) 19:30:34 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:34 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x10000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:34 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200980, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x1f, 0x5, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x300, 0x40, {}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "311dc45995c71a177ddb987641c8aabe39825c1ada3dd69f80a96ab795d0ed0c630b0231042c9d14b108347507266339fba09dec7bea3ad63441b5ae5864fc78"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) 19:30:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:34 executing program 0: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4a}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffa8c}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffff27b, 0x40, 0x200]}]}, 0x4c}}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 19:30:34 executing program 5: r0 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x31}, @void, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2d}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000050}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x31, 0x0, 0x50, 0x11, @remote, @loopback, 0x8000, 0x9, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08deffc0f3e98752de7f88441d4915773c0600", @ANYRES32=r1, @ANYBLOB="0800050000100000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x8001) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0)='wireguard\x00', 0xffffffffffffffff) mq_notify(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x34, 0x4, @thr={&(0x7f0000000580)="9b416209f5b2b71101fe38981a66119a48e154dfa4a8e529b0aeccf0b70b04723c830b094ff4e47504fde4323b691fe7298c459a84e87e3630e6ed9d62fcf4b84c84a48bfadca0978b50da8341344c6f08e124f786061d0ff0b7b0bd0f5827af4fd6e0bfe7b26c8c7e90a724b922ce2f771006e67d8da81a7dfaa9a0cb2d9a7d7837495fa9175d41a5b415b2d90f6672f7ee13deb9cb7edf234f47d75da0ce", &(0x7f0000000640)="a3b0d221a8932639ec33f2b87f9799219f25fbc72f3d04938dcc9b1c59d7491a417362a7be1a266f995c1a19ee8e591e1b04c4deb81a14fc6b98e1726426df55a1c00fc91fc1468fc5b374a705de125c0df7cf65417e5b99c6"}}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r5, &(0x7f0000000340)={0x3, 0x3, 0x6, 0x5}, &(0x7f0000000380)) 19:30:34 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:34 executing program 3: r0 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x31}, @void, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2d}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000050}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x31, 0x0, 0x50, 0x11, @remote, @loopback, 0x8000, 0x9, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08deffc0f3e98752de7f88441d4915773c0600", @ANYRES32=r1, @ANYBLOB="0800050000100000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x8001) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0)='wireguard\x00', 0xffffffffffffffff) mq_notify(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x34, 0x4, @thr={&(0x7f0000000580)="9b416209f5b2b71101fe38981a66119a48e154dfa4a8e529b0aeccf0b70b04723c830b094ff4e47504fde4323b691fe7298c459a84e87e3630e6ed9d62fcf4b84c84a48bfadca0978b50da8341344c6f08e124f786061d0ff0b7b0bd0f5827af4fd6e0bfe7b26c8c7e90a724b922ce2f771006e67d8da81a7dfaa9a0cb2d9a7d7837495fa9175d41a5b415b2d90f6672f7ee13deb9cb7edf234f47d75da0ce", &(0x7f0000000640)="a3b0d221a8932639ec33f2b87f9799219f25fbc72f3d04938dcc9b1c59d7491a417362a7be1a266f995c1a19ee8e591e1b04c4deb81a14fc6b98e1726426df55a1c00fc91fc1468fc5b374a705de125c0df7cf65417e5b99c6"}}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r5, &(0x7f0000000340)={0x3, 0x3, 0x6, 0x5}, &(0x7f0000000380)) 19:30:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) r7 = socket(0x21, 0x80000, 0x5) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001780)='l2tp\x00', r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="04002abd7000fddbdf250100000014001f00fe80000000000000000000000000002f06000300000000000c00160009000000000000000800190000000000080019000000000008001700", @ANYRES32=r2, @ANYBLOB="1400000076657468305f746f5f627269646765000c00160009000000000000001400080076657468315f746f5f626f6e6400000006000e0006000000"], 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x95000) 19:30:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x801, 0x0) 19:30:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:34 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:34 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:34 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 19:30:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 19:30:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x24004000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x84080, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) 19:30:34 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_getsetattr(r2, &(0x7f0000000280)={0x3, 0x40, 0xf3, 0x6}, &(0x7f00000002c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) getpgid(0x0) r3 = fork() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0xd04, 0x20007, 0x7, 0x8, 0x8, r3}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r0, 0x9000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800003f, 0x200) ioctl$BLKTRACESETUP(r4, 0x127c, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000100)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 19:30:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) r7 = socket(0x21, 0x80000, 0x5) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001780)='l2tp\x00', r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="04002abd7000fddbdf250100000014001f00fe80000000000000000000000000002f06000300000000000c00160009000000000000000800190000000000080019000000000008001700", @ANYRES32=r2, @ANYBLOB="1400000076657468305f746f5f627269646765000c00160009000000000000001400080076657468315f746f5f626f6e6400000006000e0006000000"], 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x95000) 19:30:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'sit0\x00', 0x0, 0x29, 0xe8, 0x9, 0x9, 0x10, @private0={0xfc, 0x0, [], 0x5}, @ipv4={[], [], @multicast1}, 0x8, 0x700, 0x0, 0x1}}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x4008810) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x1, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000000380)='/dev/urandom\x00'}, 0x30) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x906, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}}, 0x8000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r3, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) 19:30:34 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 19:30:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x400081, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000008721159f7749f67dd306f34bf3a7336535659432b0bccc1e20a87b9c9c8ab39e574aa625481200c3ab1fd40e6ff3d85ec82c98d9a2f0989d187c797b75cf874ac3e9cd5352e6efc573e06a9da0cdf382500ee4b25f2bc9c66b27fe72a43b203e5f195e30bcdf034105c5c082492c3110dbd10681a17d311187f7a9322859cf640fc4479b86c5685c46e71276f699069f7128198cf28322a0d1e81a2eb98dd282bd0cc61ebfa73844284d63a156a7f253736dafc04ffc377fc40bc384cecbb92fb6c6f6394122dd30b17ae37b694a11952d130fb0b4655f92c0daa1cca5", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2f, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044810}, 0x40000) 19:30:34 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x29, 0x4, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r1, 0x100000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:35 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r3, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 19:30:35 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r3, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:35 executing program 0: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@can}}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000e, 0x1010, r0, 0x0) 19:30:35 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@can}}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000e, 0x1010, r0, 0x0) 19:30:35 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r3, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 19:30:35 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) r7 = socket(0x21, 0x80000, 0x5) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001780)='l2tp\x00', r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="04002abd7000fddbdf250100000014001f00fe80000000000000000000000000002f06000300000000000c00160009000000000000000800190000000000080019000000000008001700", @ANYRES32=r2, @ANYBLOB="1400000076657468305f746f5f627269646765000c00160009000000000000001400080076657468315f746f5f626f6e6400000006000e0006000000"], 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x95000) 19:30:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xa2000) 19:30:35 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@can}}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000e, 0x1010, r0, 0x0) 19:30:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r4, 0x4c000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) getpid() ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r4, 0x4c000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) getpid() ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:35 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@can}}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000e, 0x1010, r0, 0x0) 19:30:35 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@can}}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) 19:30:35 executing program 1: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000001) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc814}, 0x20000000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10010, r1, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 19:30:35 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r3, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r4, 0x4c000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) getpid() ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:35 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@can}}) socket$nl_crypto(0x10, 0x3, 0x15) 19:30:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r4, 0x4c000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) getpid() ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:35 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) r7 = socket(0x21, 0x80000, 0x5) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001780)='l2tp\x00', r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="04002abd7000fddbdf250100000014001f00fe80000000000000000000000000002f06000300000000000c00160009000000000000000800190000000000080019000000000008001700", @ANYRES32=r2, @ANYBLOB="1400000076657468305f746f5f627269646765000c00160009000000000000001400080076657468315f746f5f626f6e6400000006000e0006000000"], 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) 19:30:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8b05cd6fa1e332b1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:35 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@can}}) 19:30:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r4, 0x4c000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) getpid() ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:35 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r4, 0x4c000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) getpid() ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r3, 0x4c000) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)=@buf) getpid() 19:30:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r4, 0x4c000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:35 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:35 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 19:30:35 executing program 1: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@can}}) 19:30:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r3, 0x4c000) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)=@buf) 19:30:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) socket(0x21, 0x80000, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780)='l2tp\x00', r2) 19:30:36 executing program 1: r0 = syz_open_dev$sndpcmp(0x0, 0x147, 0x22040) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x280000c, 0x1010, r0, 0x83000000) 19:30:36 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r4, 0x4c000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:36 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:36 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x1, 0x0) 19:30:36 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x810, r3, 0x4c000) 19:30:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40040) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x7, 0x4082) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffa000/0x1000)=nil}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0xfffffffffffffffc) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00', 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0001fcdbdf2504000000080002000700000000000000bde7e4ed1ad4b61a885d326e82273da94a287716be19686da635026b9bfc99e98829"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000440)=@buf) 19:30:36 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x2080, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:36 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x7f, 0x2000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:30:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) socket(0x21, 0x80000, 0x5) 19:30:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8000, 0x0) 19:30:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:36 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:30:36 executing program 1: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x180000000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:36 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) 19:30:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x180000000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:36 executing program 5: mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:30:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) socket(0x21, 0x80000, 0x5) 19:30:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:36 executing program 5: mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:30:36 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 19:30:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:36 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:36 executing program 5: mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:30:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:37 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:30:37 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = fork() syz_open_procfs$namespace(r3, 0x0) getpgid(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 19:30:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 19:30:37 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:30:37 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:37 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2500000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000200e9ffffff070004dd09010100060006000200000008000900021d0000"], 0x44}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 19:30:37 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) 19:30:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:37 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = fork() syz_open_procfs$namespace(r2, 0x0) getpgid(r1) socket$nl_generic(0x10, 0x3, 0x10) 19:30:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 19:30:37 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 19:30:37 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:37 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) mmap$fb(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x15, 0x80010, r1, 0xd000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 19:30:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = fork() syz_open_procfs$namespace(r3, 0x0) getpgid(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 19:30:37 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) getpgid(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x36}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd0, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=r1}) 19:30:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = fork() syz_open_procfs$namespace(r2, 0x0) getpgid(r1) 19:30:37 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) 19:30:37 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) 19:30:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = fork() syz_open_procfs$namespace(r2, 0x0) 19:30:37 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:38 executing program 0: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = fork() syz_open_procfs$namespace(r2, 0x0) getpgid(r1) 19:30:38 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:38 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) 19:30:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:38 executing program 0: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:38 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) fork() 19:30:38 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) 19:30:38 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:38 executing program 0: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:38 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) 19:30:38 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 19:30:38 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = fork() syz_open_procfs$namespace(r2, 0x0) 19:30:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) fork() 19:30:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:38 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) 19:30:38 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:38 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) 19:30:38 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:38 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) 19:30:38 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) socket(0x1a, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = fork() syz_open_procfs$namespace(r2, 0x0) getpgid(r1) socket$nl_generic(0x10, 0x3, 0x10) 19:30:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4043000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82240, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 19:30:38 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) 19:30:38 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) 19:30:38 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) 19:30:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 19:30:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) 19:30:39 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) 19:30:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4043000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82240, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 19:30:39 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 19:30:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xa2000) 19:30:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) fork() 19:30:39 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=""/173, 0xad}}, 0x10) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:39 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=""/173, 0xad}}, 0x10) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13}, 0x8d, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4043000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82240, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 19:30:39 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 19:30:39 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=""/173, 0xad}}, 0x10) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) fork() 19:30:39 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=""/173, 0xad}}, 0x10) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13}, 0x0, 0x0, 0x4003}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:39 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 19:30:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4043000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82240, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 19:30:39 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=""/173, 0xad}}, 0x10) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0xf3000) fork() 19:30:39 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=""/173, 0xad}}, 0x10) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x286}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) 19:30:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 19:30:39 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4043000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82240, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 19:30:39 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=""/173, 0xad}}, 0x10) 19:30:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 19:30:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:30:39 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:39 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2081, 0x0) 19:30:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4043000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 19:30:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x286}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) 19:30:40 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:40 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:40 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) fork() 19:30:40 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:40 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 19:30:40 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) fork() 19:30:40 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:40 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4043000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 19:30:40 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) fork() 19:30:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x286}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) 19:30:40 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:40 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:40 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 19:30:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4043000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 19:30:40 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:40 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:40 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:40 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 19:30:40 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x286}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) 19:30:40 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:40 executing program 2: mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:40 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82240, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 19:30:41 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:41 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 19:30:41 executing program 2: mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:41 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:41 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:41 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82240, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 19:30:41 executing program 2: mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 19:30:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x286}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) 19:30:41 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 19:30:41 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x82240, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 19:30:41 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:41 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x82240, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 19:30:41 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) fork() 19:30:41 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:41 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:41 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x82240, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 19:30:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x286}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) 19:30:41 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:41 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) fork() 19:30:41 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:41 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x82240, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 19:30:41 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:41 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 19:30:41 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) fork() 19:30:41 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:41 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 19:30:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:42 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 19:30:42 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) fork() 19:30:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 19:30:42 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:42 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) fork() 19:30:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) 19:30:42 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 19:30:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:42 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) fork() 19:30:42 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) fork() 19:30:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:42 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 4: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 2: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:42 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) 19:30:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 19:30:42 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 2: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:42 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:42 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 19:30:42 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:42 executing program 2: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000200000000900000005000800090a0000050007000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x286}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x32}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) 19:30:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 19:30:43 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) fork() 19:30:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) 19:30:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 19:30:43 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:43 executing program 4: socketpair(0x10, 0x6, 0x400, &(0x7f0000001600)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70002ff0d1d9fe"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x8014) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000004300)={'wg2\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000043c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x4008010) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 19:30:43 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 1670.095482] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.101132] ieee802154 phy1 wpan1: encryption failed: -22 19:30:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4100, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100)) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 19:30:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:43 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:43 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 19:30:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) 19:30:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:43 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:43 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 19:30:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:43 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:43 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 19:30:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) 19:30:44 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:44 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x8040) 19:30:44 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:44 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:44 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x0, 0x70bd29, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x808c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:44 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r0) 19:30:44 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r2, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:44 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:44 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:44 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 19:30:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:44 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r2, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:44 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:44 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:30:44 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 19:30:44 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r2, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:44 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:44 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r2, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:44 executing program 1: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 19:30:44 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:44 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:44 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) 19:30:44 executing program 1: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 19:30:44 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r2, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:45 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:45 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:45 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) 19:30:45 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r2, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:45 executing program 1: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 19:30:45 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 19:30:45 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:45 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:45 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) 19:30:45 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 19:30:45 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:45 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r2, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@fwd={0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x7ff, [{0xd, 0x3, 0x3}, {0xf, 0x3, 0x80}, {0xf, 0x2}, {0xe, 0x3, 0x3}, {0x5, 0x2, 0xfffffffb}, {0x7, 0x2, 0x6}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x68dc33fb8e737c40, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x9a, 0x1000}, 0x20) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 19:30:45 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:45 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 19:30:45 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=""/43, 0x2b}}, 0x10) 19:30:45 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 19:30:45 executing program 4: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:45 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:45 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 19:30:45 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:45 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/122, 0x7a}}, 0x10) 19:30:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20102, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x4000, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0xfffffffffffffffc) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 19:30:45 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000000c0)=0xff) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 19:30:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:45 executing program 3: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:45 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) 19:30:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:45 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000000c0)=0xff) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 19:30:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:45 executing program 1: mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:46 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) 19:30:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x100000000000000) 19:30:46 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000000c0)=0xff) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 19:30:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x27, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x67, 0xae, 0x1}, 0x20) 19:30:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:46 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000140)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20002, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_timedsend(r2, &(0x7f0000000000)="fab0186a31a3d87dae9d", 0xa, 0x7, &(0x7f0000000080)={0x0, 0x989680}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:30:46 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000000c0)=0xff) 19:30:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:46 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) 19:30:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:46 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000140)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20002, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_timedsend(r2, &(0x7f0000000000)="fab0186a31a3d87dae9d", 0xa, 0x7, &(0x7f0000000080)={0x0, 0x989680}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:30:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:46 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:46 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/174, 0x0, 0xae, 0x1}, 0x20) 19:30:46 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 19:30:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:46 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000140)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20002, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_timedsend(r2, &(0x7f0000000000)="fab0186a31a3d87dae9d", 0xa, 0x7, &(0x7f0000000080)={0x0, 0x989680}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 19:30:46 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/174, 0x0, 0xae, 0x1}, 0x20) 19:30:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x24, 0xfd, 0x1}, 0x20) 19:30:47 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) 19:30:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:47 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 19:30:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/174, 0x0, 0xae, 0x1}, 0x20) 19:30:47 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000140)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20002, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) mq_timedsend(r2, &(0x7f0000000000)="fab0186a31a3d87dae9d", 0xa, 0x7, &(0x7f0000000080)={0x0, 0x989680}) 19:30:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x24, 0xfd, 0x1}, 0x20) 19:30:47 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00', r0) 19:30:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x57, 0xae, 0x1}, 0x20) 19:30:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x24, 0xfd, 0x1}, 0x20) 19:30:47 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 19:30:47 executing program 2: socketpair(0x21, 0x80000, 0x2, &(0x7f0000000000)) 19:30:47 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000140)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20002, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xfffffffffffffffc) 19:30:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x33, 0xae, 0x1}, 0x20) 19:30:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:47 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 19:30:47 executing program 2: socketpair(0x0, 0x80000, 0x2, &(0x7f0000000000)) 19:30:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:47 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 19:30:47 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000140)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20002, 0x0) 19:30:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x33, 0xae, 0x1}, 0x20) 19:30:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:47 executing program 2: socketpair(0x0, 0x80000, 0x2, &(0x7f0000000000)) 19:30:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x33, 0xae, 0x1}, 0x20) 19:30:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:47 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000140)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x0, 0x0) 19:30:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}, {0xe, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x57, 0xae, 0x1}, 0x20) 19:30:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:47 executing program 2: socketpair(0x0, 0x80000, 0x2, &(0x7f0000000000)) 19:30:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x37ab}, {0xc, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x4f, 0xae, 0x1}, 0x20) 19:30:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:48 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000140)) 19:30:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x37ab}]}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x47, 0xae, 0x1}, 0x20) 19:30:48 executing program 2: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 19:30:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000300)=""/253, 0x2f, 0xfd, 0x1}, 0x20) 19:30:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:48 executing program 2: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) 19:30:48 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) pkey_alloc(0x0, 0x3) 19:30:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x27, 0xae, 0x1}, 0x20) 19:30:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0]}}, &(0x7f0000000300)=""/253, 0x2e, 0xfd, 0x1}, 0x20) 19:30:48 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x27, 0xae, 0x1}, 0x20) 19:30:48 executing program 2: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) 19:30:48 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) 19:30:48 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x27, 0xae, 0x1}, 0x20) 19:30:48 executing program 2: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) 19:30:48 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) 19:30:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x3, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:48 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:48 executing program 2: socketpair(0x21, 0x0, 0x2, 0x0) 19:30:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:48 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0xffffffffffffffff) 19:30:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x3, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) 19:30:48 executing program 2: socketpair(0x21, 0x0, 0x2, 0x0) 19:30:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:48 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) prctl$PR_SET_FPEXC(0xc, 0x2) 19:30:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x3, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) 19:30:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x24, 0xfd, 0x1}, 0x20) 19:30:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x0, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:49 executing program 2: socketpair(0x21, 0x0, 0x2, 0x0) 19:30:49 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) 19:30:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x0, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x0, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) 19:30:49 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) pkey_alloc(0x0, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil}) 19:30:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x24, 0xfd, 0x1}, 0x20) 19:30:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x0, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:49 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) pkey_alloc(0x0, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) 19:30:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2e, 0xfd, 0x1}, 0x20) 19:30:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x0, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x24, 0xfd, 0x1}, 0x20) 19:30:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x0, 0x5b}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:49 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) pkey_alloc(0x0, 0x2) 19:30:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @enum]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x3f, 0xae, 0x1}, 0x20) 19:30:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:49 executing program 1: socket(0x2, 0xa, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) 19:30:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @enum]}}, &(0x7f0000000100)=""/174, 0x3e, 0xae, 0x1}, 0x20) 19:30:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:49 executing program 1: socket(0x2, 0xa, 0x0) 19:30:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @enum]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20) 19:30:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2e, 0xfd, 0x1}, 0x20) 19:30:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:49 executing program 1: socket(0x0, 0xa, 0x0) 19:30:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @enum]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20) 19:30:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/174, 0x0, 0xae, 0x1}, 0x20) 19:30:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000300)=""/253, 0x2f, 0xfd, 0x1}, 0x20) 19:30:50 executing program 1: socket(0x0, 0xa, 0x0) 19:30:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @enum]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20) 19:30:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/174, 0x0, 0xae, 0x1}, 0x20) 19:30:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @enum]}}, &(0x7f0000000100)=""/174, 0x3e, 0xae}, 0x20) 19:30:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0]}}, &(0x7f0000000300)=""/253, 0x2e, 0xfd, 0x1}, 0x20) 19:30:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:50 executing program 1: socket(0x0, 0xa, 0x0) 19:30:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/174, 0x0, 0xae, 0x1}, 0x20) 19:30:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @enum]}}, &(0x7f0000000100)=""/174, 0x3e, 0xae}, 0x20) 19:30:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x0, 0x5b}}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x33, 0xae, 0x1}, 0x20) 19:30:50 executing program 1: socket(0x2, 0x0, 0x0) 19:30:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @enum]}}, &(0x7f0000000100)=""/174, 0x3e, 0xae}, 0x20) 19:30:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000300)=""/253, 0x2c, 0xfd, 0x1}, 0x20) 19:30:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2e, 0xfd, 0x1}, 0x20) 19:30:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x1b, 0xae, 0x1}, 0x20) 19:30:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000300)=""/253, 0x2b, 0xfd, 0x1}, 0x20) 19:30:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000300)=""/253, 0x2c, 0xfd, 0x1}, 0x20) 19:30:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:50 executing program 1: socket(0x2, 0x0, 0x0) 19:30:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x1b, 0xae, 0x1}, 0x20) 19:30:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000300)=""/253, 0x2a, 0xfd, 0x1}, 0x20) 19:30:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000300)=""/253, 0x2c, 0xfd, 0x1}, 0x20) 19:30:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000300)=""/253, 0x29, 0xfd, 0x1}, 0x20) 19:30:51 executing program 1: socket(0x2, 0x0, 0x0) 19:30:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000300)=""/253, 0x2c, 0xfd, 0x1}, 0x20) 19:30:51 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x1b, 0xae, 0x1}, 0x20) 19:30:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/253, 0x28, 0xfd, 0x1}, 0x20) 19:30:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:51 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x5b}}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x33, 0xae, 0x1}, 0x20) 19:30:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2e, 0xfd, 0x1}, 0x20) 19:30:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000300)=""/253, 0x27, 0xfd, 0x1}, 0x20) 19:30:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:51 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x5b}}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x33, 0xae, 0x1}, 0x20) 19:30:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000300)=""/253, 0x26, 0xfd, 0x1}, 0x20) 19:30:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x30, 0xfd, 0x1}, 0x20) 19:30:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xe4, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:51 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x5b}}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x33, 0xae, 0x1}, 0x20) 19:30:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xe4, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 19:30:51 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/174, 0x33, 0xae, 0x1}, 0x20) 19:30:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 19:30:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xe4, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}]}}, &(0x7f0000000100)=""/174, 0x32, 0xae, 0x1}, 0x20) 19:30:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2e, 0xfd, 0x1}, 0x20) 19:30:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19:30:52 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 19:30:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000300)=""/253, 0x20, 0xfd, 0x1}, 0x20) 19:30:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 19:30:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000300)=""/253, 0x20, 0xfd, 0x1}, 0x20) 19:30:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:52 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000300)=""/253, 0x26, 0xfd}, 0x20) 19:30:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 19:30:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "be20c247b9b8c638ae540304c421a3be84a2b93d8f1339e9449c1db49f76c39b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x431}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1385fd97754cfbb1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000300)=""/253, 0x20, 0xfd, 0x1}, 0x20) 19:30:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/253, 0x0, 0xfd, 0x1}, 0x20) 19:30:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:52 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000300)=""/253, 0x26, 0xfd}, 0x20) 19:30:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 19:30:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000300)=""/253, 0x2c, 0xfd, 0x1}, 0x20) 19:30:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19:30:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/253, 0x2d, 0xfd, 0x1}, 0x20) 19:30:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x24, 0xfd, 0x1}, 0x20) [ 1679.345536] kasan: CONFIG_KASAN_INLINE enabled 19:30:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}]}}, &(0x7f0000000100)=""/174, 0x32, 0xae}, 0x20) 19:30:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000300)=""/253, 0x2c, 0xfd, 0x1}, 0x20) [ 1679.384122] kasan: GPF could be caused by NULL-ptr deref or user memory access 19:30:52 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000300)=""/253, 0x26, 0xfd}, 0x20) [ 1679.475019] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1679.481319] CPU: 0 PID: 16382 Comm: syz-executor.0 Not tainted 4.19.184-syzkaller #0 [ 1679.489211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.498596] RIP: 0010:nl802154_add_llsec_key+0x1fa/0x580 [ 1679.504064] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 3f 03 00 00 48 8b 93 28 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 cf 19:30:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x24, 0xfd, 0x1}, 0x20) [ 1679.522996] RSP: 0018:ffff888207f2f558 EFLAGS: 00010246 [ 1679.528372] RAX: dffffc0000000000 RBX: ffff8880b25eb580 RCX: 0000000000000000 [ 1679.535662] RDX: 0000000000000000 RSI: ffffffff87c6d695 RDI: ffff8880b25eb6a8 [ 1679.542943] RBP: 1ffff11040fe5ead R08: 0000000000000001 R09: ffff888207f2f920 [ 1679.550223] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8882386f8440 [ 1679.557504] R13: ffff8880ab5f1050 R14: ffff8880b25eb580 R15: ffffffff89cf87c0 [ 1679.564788] FS: 00007fcab2de7700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 1679.573053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1679.578945] CR2: 0000000000540198 CR3: 00000001fd9a7000 CR4: 00000000001406f0 [ 1679.586234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1679.593516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1679.600826] Call Trace: [ 1679.603438] ? __cfg802154_wpan_dev_from_attrs+0x510/0x510 [ 1679.609083] ? nl802154_post_doit+0x170/0x170 [ 1679.613596] ? apparmor_capable+0x147/0x750 [ 1679.617942] ? apparmor_sb_mount+0x970/0x970 19:30:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}]}}, &(0x7f0000000100)=""/174, 0x32, 0xae}, 0x20) [ 1679.622377] ? apparmor_sb_mount+0x970/0x970 [ 1679.626806] ? nl802154_pre_doit+0xf8/0xcd0 [ 1679.631145] ? validate_nla+0x270/0x820 [ 1679.635139] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 1679.640266] ? nla_parse+0x1b2/0x290 [ 1679.644003] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 1679.649127] genl_family_rcv_msg+0x642/0xc40 [ 1679.653558] ? genl_rcv+0x40/0x40 [ 1679.657028] ? genl_rcv_msg+0x12f/0x160 [ 1679.661019] ? __mutex_add_waiter+0x160/0x160 [ 1679.665538] ? __radix_tree_lookup+0x216/0x370 [ 1679.670137] genl_rcv_msg+0xbf/0x160 [ 1679.673873] netlink_rcv_skb+0x160/0x440 [ 1679.677950] ? genl_family_rcv_msg+0xc40/0xc40 [ 1679.682548] ? netlink_ack+0xae0/0xae0 [ 1679.686451] ? genl_rcv+0x15/0x40 [ 1679.689920] genl_rcv+0x24/0x40 [ 1679.693211] netlink_unicast+0x4d5/0x690 [ 1679.697374] ? netlink_sendskb+0x110/0x110 [ 1679.701623] ? _copy_from_iter_full+0x229/0x7c0 [ 1679.706311] ? __phys_addr_symbol+0x2c/0x70 [ 1679.710660] ? __check_object_size+0x17b/0x3e0 [ 1679.715258] netlink_sendmsg+0x6bb/0xc40 [ 1679.719339] ? aa_af_perm+0x230/0x230 [ 1679.723252] ? nlmsg_notify+0x1a0/0x1a0 [ 1679.727246] ? kernel_recvmsg+0x220/0x220 [ 1679.731411] ? nlmsg_notify+0x1a0/0x1a0 [ 1679.735405] sock_sendmsg+0xc3/0x120 [ 1679.739139] ___sys_sendmsg+0x7bb/0x8e0 [ 1679.743153] ? lock_acquire+0x170/0x3c0 [ 1679.747156] ? copy_msghdr_from_user+0x440/0x440 [ 1679.751928] ? __fget+0x32f/0x510 [ 1679.755667] ? lock_downgrade+0x720/0x720 [ 1679.759840] ? check_preemption_disabled+0x41/0x280 [ 1679.764896] ? check_preemption_disabled+0x41/0x280 [ 1679.769928] ? __fget+0x356/0x510 19:30:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/253, 0x24, 0xfd, 0x1}, 0x20) [ 1679.773486] ? do_dup2+0x450/0x450 [ 1679.777045] ? debug_object_active_state+0x254/0x330 [ 1679.782178] ? debug_object_init_on_stack+0x20/0x20 [ 1679.787224] ? __fdget+0x1d0/0x230 [ 1679.790788] __x64_sys_sendmsg+0x132/0x220 [ 1679.795042] ? __sys_sendmsg+0x1b0/0x1b0 [ 1679.799122] ? __se_sys_futex+0x298/0x3b0 [ 1679.803312] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1679.808695] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1679.813740] ? do_syscall_64+0x21/0x620 [ 1679.817740] do_syscall_64+0xf9/0x620 [ 1679.821559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1679.826763] RIP: 0033:0x466459 [ 1679.829965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1679.848962] RSP: 002b:00007fcab2de7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1679.856684] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1679.863963] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 19:30:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000300)=""/253, 0x2f, 0xfd, 0x1}, 0x20) 19:30:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0]}}, &(0x7f0000000300)=""/253, 0x2e, 0xfd, 0x1}, 0x20) 19:30:53 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@volatile]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000300)=""/253, 0x2f, 0xfd, 0x1}, 0x20) [ 1679.871338] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1679.878707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1679.885987] R13: 00007ffdc96df46f R14: 00007fcab2de7300 R15: 0000000000022000 [ 1679.893281] Modules linked in: [ 1679.919859] ---[ end trace af322e773ed459cd ]--- [ 1679.941271] RIP: 0010:nl802154_add_llsec_key+0x1fa/0x580 [ 1679.974736] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 3f 03 00 00 48 8b 93 28 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 cf [ 1680.059817] RSP: 0018:ffff888207f2f558 EFLAGS: 00010246 [ 1680.069194] RAX: dffffc0000000000 RBX: ffff8880b25eb580 RCX: 0000000000000000 [ 1680.077243] RDX: 0000000000000000 RSI: ffffffff87c6d695 RDI: ffff8880b25eb6a8 [ 1680.085462] RBP: 1ffff11040fe5ead R08: 0000000000000001 R09: ffff888207f2f920 [ 1680.092815] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8882386f8440 [ 1680.103503] R13: ffff8880ab5f1050 R14: ffff8880b25eb580 R15: ffffffff89cf87c0 [ 1680.110864] FS: 00007fcab2de7700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 1680.121058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1680.127888] CR2: 00007ffd92183c20 CR3: 00000001fd9a7000 CR4: 00000000001406e0 [ 1680.135768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1680.143488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1680.150765] Kernel panic - not syncing: Fatal exception [ 1680.156759] Kernel Offset: disabled [ 1680.160602] Rebooting in 86400 seconds..